1. Who this policy covers
Nensea (“we”, “us” and “our”) is responsible for the personal information described in this policy. You can contact us at shoaib@nensea.com.
This policy covers our website, early-access list and communications with us. Additional privacy information for the diagram editor, AI features and payments will be provided before you use those features.
2. Information collected through this website
Early-access registration: we collect your name, email address, optional feature interests and the date of registration. The signup also asks you to confirm that you are at least 18 and accept the Terms of Service. Name and email are required to register; feature interests are optional.
Contact requests: when you email us, we receive your email address, the name and role you provide, your message and ordinary email metadata. Our contact dialog opens your email application so you can review and send the message.
Security and delivery: we and our service providers process technical information such as your IP address, browser or device information, requested URL and request time. We also store a hashed version of the IP address with request counts and timing information to limit abusive signup attempts.
When enabled, Cloudflare Web Analytics provides page-view, referrer, browser, device and performance statistics. Cloudflare Turnstile processes browser and network signals to assess whether a request is automated. These services may load when you visit a page, before you complete a signup.
Do not include passwords, payment-card details, sensitive personal information or other people’s confidential information in the signup fields or a general inquiry.
3. Why we use information
We use signup details to maintain the early-access list, assess requested features, contact you about invitations and respond to requests relating to that list. Joining the list does not authorize unrelated third-party marketing.
We use correspondence to respond to your inquiry, provide support and handle privacy, billing or legal requests. We use technical and anti-abuse information to deliver the website, investigate errors, prevent spam and protect the service.
Analytics helps us understand which pages are useful and how the website performs. We may also retain or disclose information when necessary to meet a legal obligation, establish or defend a legal claim, or address a security incident.
4. Legal bases where data-protection law requires them
Where applicable law requires a legal basis, we rely on your consent for the early-access communications you request and any separately optional marketing; steps taken at your request before a contract or performance of a contract for relevant service inquiries; legitimate interests for proportionate security, abuse prevention, service operation and responding to ordinary correspondence; and legal obligations where the law requires processing.
Our legitimate interests are protecting the service and its users, answering requests and understanding basic website performance. We consider the effect on individuals and do not rely on these interests where the applicable law requires consent instead.
You may withdraw consent by emailing shoaib@nensea.com. Withdrawal does not affect processing that was lawful before withdrawal. The ordinary automated checks used to reject suspected spam are not decisions about your legal rights or creditworthiness.
5. Service providers and disclosures
Supabase provides the database used for early-access signups and rate-limit records. Cloudflare provides Turnstile security checks and, when configured, Web Analytics. Hosting, network and email providers also process the information necessary to deliver the site and our correspondence.
We use providers for their relevant services and do not give them permission to use signup information for unrelated advertising. Some providers also process limited information for their own purposes under their own notices. For example, Cloudflare describes both its role in providing Turnstile security and its use of signals to improve that security service.
We do not sell early-access registration information or share it for cross-context behavioral advertising. We may disclose information if required by law, reasonably necessary to protect rights or safety, or requested by you. If the service is transferred as part of a business transaction, personal information may transfer subject to applicable law and the protections required for that transaction.
7. Diagram editor, AI features and payments
The early-access signup does not collect diagrams, prompts, account passwords or payment-card details. We do not send signup details to generative AI services.
Before you use an AI feature, we will explain which provider receives your content, what information is shared, how it is used and retained, whether it may be used for training, and what controls are available to you.
Privacy information for accounts, saved diagrams, collaboration and payments will be provided before those features collect your information. We will obtain consent where required by law. Please contact us if you have questions before submitting personal or confidential content.
8. How long information is kept
We keep signup details while managing early access and related invitations. You can request removal at any time. We may retain limited information when needed for legal obligations, security or resolving a dispute.
Correspondence is kept for as long as needed to resolve the inquiry and deal with reasonably related follow-up, disputes or legal obligations. The relevant factors include whether a request remains open, applicable legal deadlines and whether information is needed to investigate abuse.
Security records, including rate-limit records, may be retained after a temporary request restriction ends. These records remain stored until deleted during data maintenance or in response to an applicable deletion request.
Service-provider logs and backups have their own retention cycles. Deletion from an active database does not necessarily remove every backup immediately. Information kept for a legal obligation or claim is limited to that purpose where required by law. You can ask us about the retention applicable to your information.
9. Security and international processing
We use measures such as access restrictions, form validation and abuse prevention to protect personal information. No method of storage or transmission is completely secure.
We operate from Pakistan, and our service providers may process information in other countries, including for hosting, support and security.
International transfers are subject to applicable data-protection requirements. Contact us for information about processing locations and the safeguards applicable to your information.
10. Your requests and privacy rights
You may ask us to remove you from the early-access list, correct your details or stop the communications you requested by emailing shoaib@nensea.com. Send the request from the address used to register where possible. Do not send identity documents unless we explain why proportionate verification is necessary.
Depending on the law that applies, you may also have rights to access or receive a copy of your information, request deletion or correction, restrict processing, receive portable data, withdraw consent or appeal a refused request. Rights are subject to the conditions and exceptions in the applicable law.
We will respond within the period required by applicable law. If a request cannot be fulfilled, we will explain the reason and any available next step as required. You may complain to the data-protection or consumer authority competent for your location; you do not have to contact us first where the law gives you that right.
11. Your right to object and stop marketing
Where applicable law gives you this right, you may object to processing based on legitimate interests on grounds relating to your situation. You may object to direct marketing at any time. Email shoaib@nensea.com with “Stop early-access emails” or describe the processing you object to.
Stopping promotional communications does not prevent a necessary response to a request you make or a notice required by law. We may retain the minimum information needed to honor an opt-out or meet a legal obligation.
12. Age eligibility
Nensea’s early-access registration and diagramming services are intended for users aged 18 and over.
If you believe someone under 18 has provided us with personal information, please contact shoaib@nensea.com.
13. Changes and contact
We will update the date on this page when this policy changes. Where a material change affects how existing information is used, we will provide the notice or obtain the consent required by applicable law before that new use.
For privacy requests, questions or concerns, contact Nensea at shoaib@nensea.com. Please include enough information to locate your request without sharing unnecessary sensitive information.