Persono Privacy Policy

The data controller is Persono, available at persono.nanocorp.app. For privacy requests, contact us at persono@nanocorp.app.

We collect only the data needed to operate the service, provide the report, and improve the user experience.

• Test results: questionnaire answers, dimension scores, and your personality profile among the 16 types.
• Email address: only if you provide it to receive your report, confirmation, or support.
• Payment data: processed by Stripe. Persono never stores card numbers, CVC codes, or complete bank details.
• Navigation data: page views, clicks, product events, performance, and JavaScript errors through PostHog analytics when you accept analytics cookies.
• Technical data: IP address, user agent, timestamp, requested URL, and server logs needed for security, diagnostics, and site operations.

• Providing the test, calculating your profile, and displaying results: performance of the requested service.
• Processing payment for the PDF report and providing access to digital content: performance of a contract.
• Responding to support requests and sending the report if you provide your email: contract performance or legitimate interest depending on context.
• Measuring audience, understanding user journeys, and improving Persono: legitimate interest or consent where the law requires prior consent for trackers.
• Preventing fraud, securing the service, and diagnosing incidents: legitimate interest.
• Complying with legal, tax, and accounting obligations: legal obligation.

Persono uses a consent banner for analytics cookies. If you decline, the PostHog analytics script is not loaded by our site and optional analytics events are not sent.

Cookies strictly necessary for site operation, security, or storing your consent choice may be used without prior consent when they are essential.

We use service providers that process certain data on our behalf or as independent controllers depending on the service.

• Stripe — payments and fraud prevention: stripe.com/privacy
• PostHog — product analytics, user events, performance, and errors: posthog.com/privacy
• NanoCorp — hosting, deployment, infrastructure, and related services: nanocorp.app

Some providers, including Stripe, PostHog, or infrastructure vendors, may process data outside the European Union. Where this occurs, we rely on mechanisms recognized under the GDPR, including European Commission Standard Contractual Clauses, appropriate supplementary measures, and, where applicable, the EU–U.S. Data Privacy Framework or its successor.

• Test results stored locally in your browser: until you delete them or reset browser storage.
• Purchase and report data: for the period necessary to provide the service, support, and comply with applicable accounting obligations.
• Support emails: for the time needed to handle the request, then limited archiving where a dispute or legal obligation requires it.
• Server and security logs: for a limited period proportionate to security, diagnostics, and fraud-prevention needs.
• Analytics data: for a limited period needed for audience measurement and service improvement, then aggregated or deleted when no longer necessary.

Subject to the GDPR conditions, you may exercise the following rights by emailing persono@nanocorp.app. We may request reasonable information to confirm your identity before processing a request.

• Right of access to your personal data.
• Right to rectify inaccurate or incomplete data.
• Right to erasure, also known as the right to be forgotten.
• Right to restriction of processing.
• Right to object to processing based on legitimate interests.
• Right to data portability for data you provided to us.
• Right to withdraw consent at any time for processing based on consent, without retroactive effect.

If you believe your rights are not respected, you may lodge a complaint with the CNIL in France or the competent data protection authority in your country of residence.

Persono is not intended for children under 15. If you believe a minor has provided data without appropriate authorization, contact us so we can take appropriate action.

We may update this policy to reflect changes in the service, providers, or applicable law. The last-updated date identifies the current version.