Privacy Policy

1. Data controller

The controller of personal data collected through not4.sale is NOT4SALE Srl, Via Lungo Tavollo snc, 47841 Cattolica (RN), Italy — P.IVA 04870280403.

For any request about your data, write to hello@not4.sale.

2. What data we process

Data you provide. When you fill in the contact form or the quote calculator we collect: name, email, company and phone (optional), service of interest, indicative budget, goals, timeline, website URL and the content of your message.

AI assistant chat. Messages you write to “N4S · AI” are stored together with an anonymous session identifier generated by your browser (not linked to your identity, unless you identify yourself in the messages).

Website mini-audit. If you request a quote and provide your website URL, we capture a public screenshot of its homepage to generate an automated analysis.

Browsing data. IT systems acquire, during normal operation, data implicit in internet protocols: IP addresses, access times, pages visited, user agent. Used only for security and aggregate statistics.

Cookies and similar tools. See the Cookie Policy for categories and consent management.

3. Purposes and legal bases

a) Answering contact and quote requests — legal basis: pre-contractual measures at your request (art. 6.1.b GDPR).

b) Generating estimates, mini-audits and follow-up emails related to your request — legal basis: pre-contractual measures (art. 6.1.b) and legitimate interest in following up a received business request (art. 6.1.f).

c) Operating the AI assistant and keeping the conversation history in your session — legal basis: performance of the requested service (art. 6.1.b).

d) Site security and abuse prevention — legal basis: legitimate interest (art. 6.1.f).

e) Usage statistics and campaign measurement via analytics and marketing cookies — legal basis: consent (art. 6.1.a), revocable anytime via “Cookie preferences”.

4. AI-based processing

Assistant replies, quote estimates and mini-audits are generated by third-party language models to which we send your message text (and, for audits, the public screenshot of the website you provide). The current provider is OpenRouter Inc. (USA), routing requests to the selected model.

Please avoid sharing unnecessary personal data in the chat, in particular special categories of data (health, opinions, etc.).

No decision producing legal effects is taken in a solely automated way: estimates and analyses are purely indicative and commercial.

5. Recipients and processors

Data is processed by providers acting as processors under art. 28 GDPR or independent controllers, strictly for their services:

• Vercel Inc. (USA) — site and API hosting;

• MongoDB Inc. / MongoDB Atlas (cloud) — database;

• OpenRouter Inc. (USA) — AI processing of messages;

• Resend (Plus Five Five, Inc., USA) — transactional email delivery;

• Google Ireland Ltd — Google Tag Manager, Google Analytics 4 and advertising services, only upon consent;

• Cloudflare Inc. (USA) — DNS and network security.

Data is never sold or shared with third parties for their own purposes.

6. Transfers outside the EU

Some providers are based in the United States. Transfers rely on the EU-U.S. Data Privacy Framework, where the provider adheres to it, or on Standard Contractual Clauses approved by the European Commission (art. 46 GDPR), with supplementary measures where needed.

7. Retention

• Contact and quote requests: up to 24 months from the last contact, unless a contract follows.

• AI chat history: tied to your browser session; you can delete it by clearing browsing data. Server-side it is periodically removed.

• Technical logs: up to 12 months.

• Cookies: per the durations in the Cookie Policy; consent is re-requested after 6 months in any case.

8. Your rights

Under articles 15-22 GDPR you have the right to: access your data, rectification, erasure, restriction of processing, portability, objection to processing based on legitimate interest, and withdrawal of consent at any time (without affecting prior lawful processing).

Exercise your rights by writing to hello@not4.sale. We reply within 30 days.

If you believe the processing infringes the law, you can lodge a complaint with the Italian Garante (www.garanteprivacy.it) or your EU supervisory authority.

9. Minors

The site and services target professionals and businesses and are not directed at anyone under 18. We do not knowingly collect data from minors.

10. Changes to this notice

We may update this notice to reflect regulatory or service changes. The version published on this page, with the date above, is the one in force.