Legal
Privacy Policy
Last updated: May 2026
What we collect
During the alpha, we collect your email address if you join the waitlist, and aggregated usage data (page views) via Vercel Web Analytics. Vercel Web Analytics is cookieless and does not collect personal data or write tracking cookies.
Where your data lives
You choose your region when you create a workspace: UK, EU, or US. Your organisation's data (messages, files, and backups) resides in the region you select, and API requests are routed to the same region. Data does not cross regions.
What we don't do
- We do not sell your data.
- We do not share your data with advertising networks.
- We do not use tracking cookies.
Your rights
Under GDPR, you have the right to access, correct, or delete your personal data. To exercise these rights, email privacy@nallo.app.
Data retention
Waitlist emails are retained until you unsubscribe or request deletion. Workspace data is retained for 30 days after account cancellation.
Subprocessors
We publish a full list of the third-party services we use to process data. See our Subprocessors page.
Contact
Data controller: Nallo Ltd · hello@nallo.app