Privacy policy

1.Data controller

Nebul’ink is published and operated by Hani Bouras, a sole trader established in Algeria, the controller of your personal data. For any question or request: nebulink@hanibouras.com.

2.Data we process

• Account: first name, last name, email address, password if you choose one (stored as a hash, never in plain text), preferred language, date and version of your consent.
• Sign-in with Google, if you use it: your Google account identifier, first name, last name and email address (details below).
• Profile: photo, country, city, job title, organizations, roles, sectors, expertise, bio, goals and partners you are looking for.
• Contact details: contact email, phone, WhatsApp, LinkedIn, website, social media.
• Documents: pitch deck, company presentation, portfolio.
• Activity on the platform: favorites, availability, meeting requests and meetings, messages exchanged with other participants, blocks and reports, activities added to your agenda.
• Notifications: if you turn them on, your device's notification subscription and your email preferences.
• Technical data: IP address and browser linked to your login sessions, and technical error reports, for security and reliability.

3.Sign-in with Google

You can create your account or sign in with your Google account. Nebul’ink then only requests access to your basic identity ("openid", "email" and "profile"): your Google account identifier, first name, last name and email address, and whether Google has verified that address.

This information is only used to create your Nebul’ink account, link it to your Google account and sign you in. It is never sold, shared with third parties or used for advertising. Nebul’ink does not access your contacts, your emails or any other data in your Google account, and keeps no Google access token after sign-in.

Nebul’ink's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove Nebul’ink's access at any time at https://myaccount.google.com/connections. Your Nebul’ink account remains available with your email address: choose a password with "Forgot password".

4.Purposes and legal bases

• Running the platform and networking between participants (registrations, directory, messaging, meetings, program): your consent, given when you sign up.
• Sending emails and notifications about your account, messages and meetings: necessary for the service you requested. You can turn off message emails and notifications from your profile.
• Keeping the platform secure (login attempt limits, handling reports, logs and error reports): the publisher's legitimate interest.

5.Who can see your data

• Participants whose registration has been approved can see your profile: identity, photo, professional information, documents, contact email, LinkedIn, website and social media.
• Your phone and WhatsApp are only visible to participants with whom you have an accepted meeting.
• Your messages are only visible to you and the person you are talking with. When a report is made, the administrators see who reported whom and the reason given, without access to the content of conversations.
• Until your registration is approved, your profile is not visible to any other participant.
• The platform administrators, acting under the publisher's responsibility, can access the data needed to approve registrations, moderate and organize meetings.
• Your data is never sold, rented or passed on to third parties for commercial or advertising purposes.

6.Service providers

Only the following providers process data, solely to run the service and on our instructions:

• Hetzner Online GmbH (Germany, European Union): hosting of the site, database, files and backups.
• Resend, Inc. (United States): delivery of the platform's emails (email address, first name and email content).
• Sentry, Functional Software, Inc. (data hosted in the European Union): technical error reports.
• Your browser's notification service (Google, Apple or Mozilla depending on your device): delivery of notifications if you turn them on.
• Google: identity verification if you choose to sign in with Google.
• Where data is transferred outside the European Union, the transfer is covered by the European Commission's standard contractual clauses or by the EU–US Data Privacy Framework.

7.Retention

• Account, profile, messages and meetings: for the duration of the event, then 12 months after it ends, unless you delete your account earlier.
• Refused registrations: deleted 30 days after the refusal.
• Login sessions: 30 days. Database backups: 14 days.
• You can delete your account at any time from your profile: your data is then erased from the platform immediately, and from backups within 14 days.

8.Cookies

Nebul’ink uses no advertising or analytics cookies. Only strictly necessary cookies are set: a session cookie to keep you logged in, a cookie that remembers your language, and, during sign-in with Google, a temporary cookie (10 minutes at most) that secures the round trip to Google. They do not require consent.

9.Security

Traffic is encrypted (HTTPS), passwords are stored hashed, files are only accessible to logged-in users, login attempts are limited, and data is hosted in the European Union with automatic backups.

10.Your rights

Under the GDPR, you can access, correct or delete your data, request its portability, object to or restrict its processing, and withdraw your consent at any time (which deletes your account). You can update most of your information and delete your account directly from your profile. For any other request, write to nebulink@hanibouras.com: you will receive an answer within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr) or the data protection authority of your country.

11.Changes

This policy may change. The current version and its date are shown at the top of this page; you will be informed of any significant change by email or on the platform.