Legal

Privacy Policy

Your privacy matters to us. This policy explains what information Nesto collects, how we use it, and how we protect it.

Effective date: [EFFECTIVE DATE TO BE CONFIRMED] · Last updated: [LAST UPDATED DATE TO BE CONFIRMED]

1. Scope

This Privacy Policy applies to the Nesto public website (nesto.com) and the Nesto consumer application (collectively, the “Service”). By using the Service, you agree to the collection and use of information in accordance with this policy.

This policy does not apply to third-party services that Nesto does not control. We encourage you to review the privacy policies of any third-party services you access through Nesto.

2. Information we collect

Information you provide

  • Account information: Name, email address, and authentication credentials when you create an account.
  • Profile information: Preferences, family details, home-buying criteria, and priorities you share with Nesto.
  • Communications: Messages you send through the Service, including feedback, support requests, and contact form submissions.
  • Form submissions: Information provided through contact forms, feedback forms, or early-access sign-ups.

Information collected automatically

  • Device information: Browser type, operating system, device type, and screen resolution.
  • Usage data: Pages visited, features used, interaction patterns, and session duration.
  • Log data: IP address, access times, and referring URLs.
  • Analytics: Aggregated, anonymized usage statistics to help us improve the Service.

3. How we use your information

We use your information to:

  • Provide, maintain, and improve the Service.
  • Personalize your experience and recommendations.
  • Remember your preferences and home-buying criteria across sessions.
  • Communicate with you about your account, the Service, or responses to your inquiries.
  • Analyze usage patterns to improve functionality and performance.
  • Detect, prevent, and address technical issues and security threats.
  • Comply with legal obligations.

We do not sell your personal information to third parties. We do not use your information for advertising or marketing purposes without your explicit consent.

4. AI processing

Nesto uses artificial intelligence to provide personalized guidance. When you interact with Nesto's AI features:

  • Your conversations and preferences are processed to generate personalized recommendations and insights.
  • AI-generated content is provided as guidance to support your decision-making—it is not professional advice.
  • We do not use your conversations to train general AI models without your explicit consent.
  • You can request deletion of your conversation history at any time.

AI processing is subject to the same data protection principles described in this policy. Your data is used to serve you, not to exploit you.

5. Cookies & analytics

Nesto uses cookies and similar technologies for:

  • Essential cookies: Required for the Service to function properly (authentication, session management, security).
  • Analytics cookies: Help us understand how visitors use the Service so we can improve it. Analytics data is aggregated and anonymized.

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

6. Third-party services

Nesto may use third-party services to operate the Service, including:

  • Cloud hosting: For infrastructure and data storage. [CLOUD PROVIDER TO BE CONFIRMED]
  • Analytics: For aggregated usage data. [ANALYTICS PROVIDER TO BE CONFIRMED]
  • Authentication: For secure account access. [AUTH PROVIDER TO BE CONFIRMED]

These service providers are contractually bound to protect your information and use it only for the purposes we specify.

7. Data security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit (TLS) and at rest.
  • Access controls and authentication requirements.
  • Regular security assessments and monitoring.
  • Secure development practices and code review.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

8. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

  • Account data: Retained until you delete your account.
  • Conversation history: Retained until you request deletion.
  • Analytics data: Aggregated and anonymized data may be retained indefinitely.
  • Form submissions: Retained for as long as necessary to address your inquiry.

[DATA RETENTION PERIODS TO BE CONFIRMED BY LEGAL]

9. Data sharing

We do not sell your personal information. We may share your information only in the following circumstances:

  • With your consent: When you explicitly authorize us to share your information.
  • Service providers: With third-party providers who assist in operating the Service, under strict contractual obligations.
  • Legal requirements: When required by law, regulation, or valid legal process.
  • Protection of rights: To protect the rights, property, or safety of Nesto, our users, or the public.

10. Your rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information.
  • Portability: Request a copy of your data in a structured, machine-readable format.
  • Objection: Object to processing of your personal information.
  • Restriction: Request restriction of processing in certain circumstances.

To exercise these rights, contact us at [PRIVACY CONTACT EMAIL TO BE CONFIRMED]. We will respond to your request within [RESPONSE TIMEFRAME TO BE CONFIRMED].

11. Children's privacy

The Service is not intended for children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

13. Contact us

If you have questions about this Privacy Policy or our data practices, please contact us:

[LEGAL ENTITY NAME TO BE CONFIRMED]
[REGISTERED ADDRESS TO BE CONFIRMED]