OSABack to site

Legal

Privacy policy

Your project data is sensitive. Here is exactly what is collected, why, for how long, who else is involved, and how to take control at any time.

Last updated: 26 août 2026

1. Who is responsible

Nasrine M., France (SIRET 939 621 496 00016). Privacy contact: Nasrine M., contact@nasrinem.com.

2. Information collected

  • Account: email address, encrypted password, first name if provided, market and language.
  • Program and projects: step answers, notes, figures, imported workbooks, generated documents, progress.
  • AI coach: the messages you send and the answers returned.
  • Orders: plan, amounts, dates, transaction and invoice references (card data is handled by the payment provider only).
  • Advisory: consultation requests, topic, message, availability, post-session review, event registrations.
  • Technical: sign-in logs, IP address, device and browser type, for security and troubleshooting.

No sensitive categories of information are requested. The service is not intended for minors.

3. Purposes and legal bases

  • Providing access to the program, documents and coach, performance of the contract.
  • Processing payments, subscriptions, invoices and accounting obligations, contract and legal obligation.
  • Organising consultations (including with a partner expert) and events, performance of the contract.
  • Support, security, fraud prevention and service improvement, legitimate interest.
  • Advertising conversion measurement after a purchase, and commercial emails, consent, withdrawable at any time.

4. AI coach

Messages sent to the coach are transmitted to an AI model provider to generate the answer. This content is not used to train models. No automated decision with legal effect is made about you: the coach suggests, you decide. Avoid entering sensitive information or details about third parties.

5. Service providers and disclosure

Your information is never sold, rented or traded. It is accessible to Nasrine M. and, only for a booked consultation, to the partner expert concerned, who is bound by confidentiality and limited to what the session requires. The following providers act on our instructions under written agreements:

  • Paiement en ligne et facturation: Stripe Payments Europe (Irlande), coordonnées de paiement, jamais stockées par nos soins.
  • Hébergement de la base de données et des comptes: Prestataire d'infrastructure applicative, serveurs situés dans l'Union européenne.
  • Envoi des e-mails transactionnels: Prestataire d'e-mailing transactionnel (accès à l'espace, confirmations, notifications).
  • Coach IA: Fournisseur de modèles d'intelligence artificielle : les messages envoyés au coach sont transmis pour générer la réponse, sans utilisation pour l'entraînement de modèles.
  • Mesure d'audience et publicité: Google Ireland Ltd, suivi des conversions publicitaires, déclenché uniquement après un achat.
  • Visioconférence des entretiens: Service de visioconférence ouvert, sans enregistrement des séances.

Application data is hosted in the European Union, so information collected in Canada is stored and processed outside Canada and may be accessible to authorities there under applicable law. Transfers are covered by the European Commission's standard contractual clauses or an adequacy decision.

6. Retention

  • Account, projects and documents: for the duration of your subscription, then 12 months, then deleted.
  • Coach conversations: up to 24 months.
  • Accounting records and invoices: 10 years (legal requirement).
  • Consultation requests and reviews: 3 years after the last contact.
  • Technical and security logs: up to 12 months.
  • Prospect and contact messages: 3 years after the last exchange.

7. Cookies

Only strictly necessary cookies are used for sign-in, security and payment. Advertising conversion tracking runs solely after a confirmed purchase and relies on your consent, which you can refuse or withdraw through your browser settings or by writing to us. No advertising profiling is performed from the content of your projects.

8. Security

Traffic is encrypted (HTTPS), passwords are stored as hashes, database access is partitioned per account, administrative access is restricted, and automated security checks run regularly. In the event of a breach creating a real risk of significant harm, affected individuals and the competent authorities are notified.

9. Your rights

You may request access, correction, deletion, restriction, portability, object to a processing activity, or withdraw consent at any time by writing to contact@nasrinem.com. A reply is provided within 30 days. Your documents and figures can also be exported from your account at any time.

If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada, to your provincial privacy authority, or to the French data protection authority (CNIL).

10. Site information

Publisher: Nasrine M., France. Le site est hébergé sur une infrastructure d'hébergement web professionnelle (réseau de diffusion mondial) ; les données applicatives sont hébergées dans l'Union européenne. See also our terms of sale.