Privacy notice
Last updated: 22 October 2026
This is an English translation provided for convenience. The Italian version is the legally binding one and prevails in case of any discrepancy.
This notice explains, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), which personal data we process when you visit nanus.it, write to us or use the Nanus application, why we do so and what your rights are.
1. Data controller
Maingage S.r.l., Via Grotte 42, 70013 Castellana Grotte (BA), tax code and VAT number 08372160724 , registered with the Bari Companies Register, REA no. BA-622760, share capital €10,000 fully paid up. Email info@nanus.it , certified email (PEC) maingage@pec.it.
For any question about your data, write to privacy@nanus.it.
2. What data we process and why
| When | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Browsing the website | IP address, date and time, page requested, browser type | Running the website and protecting it from abuse and attacks | Legitimate interest (Art. 6(1)(f)) | Up to 30 days, unless needed to investigate abuse |
| Information requests | Name, email, company and the content of your message | Replying and, if you ask, preparing a quote | Pre-contractual measures (Art. 6(1)(b)) or legitimate interest (Art. 6(1)(f)) | 24 months from the last contact |
| Website assistant chat | Conversation messages, the page you write from, language and, if you leave them, email and name | Answering questions through the AI assistant or a member of our team, contacting you if you ask, aggregate statistics on chat usage | Pre-contractual measures (Art. 6(1)(b)) and legitimate interest in improving the service (Art. 6(1)(f)) | 12 months from the last message, or sooner if you ask us to delete it |
| Account and use of the service | Name, email, password hash, companies and roles, access log | Creating your account, giving you access, protecting the service and providing support | Performance of the contract (Art. 6(1)(b)) and legitimate interest in security (Art. 6(1)(f)) | For the term of the contract and 12 months after; access logs 12 months |
| Subscription and billing | Company tax details, chosen plan, payments and invoices | Issuing invoices and complying with tax and accounting obligations | Legal obligation (Art. 6(1)(c)) and performance of the contract (Art. 6(1)(b)) | 10 years, as required by Article 2220 of the Italian Civil Code |
| Service communications | Informing you of maintenance, important updates, renewals and changes to the terms | Performance of the contract (Art. 6(1)(b)) | For the term of the contract |
We do not send you marketing communications without your consent and we do not use your data for profiling. We do not take decisions based solely on automated processing.
The assistant chat
The website chat is answered by an assistant based on artificial intelligence: the Claude model by Anthropic, PBC. To prepare each reply we send Anthropic the conversation messages, the page and the language; we do not send your IP address or any email you leave. Anthropic processes this data on our behalf as a processor and does not use it to train its models. Conversations are stored on our server: members of our team read them and can reply instead of the assistant. The assistant’s answers may contain errors and are not decisions about you. Please do not write unnecessary personal data in the chat, such as health data or login credentials.
3. The data you enter in Nanus
Invoices, customers, suppliers, items and the other data you upload to the application belong to your company, which is the controller of that data. For this data Maingage S.r.l. acts as a data processor under Article 28 GDPR: it processes the data only to provide the service and in accordance with your instructions, as described in the data processing agreement contained in the Terms of service.
4. Who we share data with
Data is processed by our authorised staff and, on our behalf, by the providers we need to run the service:
- providers of the servers that host the website and the application, with data centres in the European Union;
- our email provider;
- Anthropic, PBC (United States), which provides the artificial intelligence model for the website chat;
- the accredited intermediary that transmits invoices to the Exchange System (SDI) and the digital archiving provider, on plans that include these services;
- the payment provider, when you pay for your subscription;
- tax and legal advisers, bound by professional secrecy.
These providers are appointed as data processors. An up-to-date list is available on request. The electronic invoices you send pass through the Revenue Agency’s Exchange System, which processes them as an independent controller. We disclose data to authorities only when required by law.
5. Transfers outside the European Union
We store data in the European Union. The exception is the website chat messages, which Anthropic processes in the United States to generate replies, under the European Commission’s standard contractual clauses included in its data processing agreement. If another provider were to process data outside the European Economic Area, it would do so only with the safeguards set out in Articles 44 et seq. GDPR, such as an adequacy decision or standard contractual clauses.
6. How we protect data
We use encrypted connections, passwords stored only as Argon2 hashes, encrypted credentials, role-based permissions and backups. The details are on the Security page.
7. Your rights
At any time you can ask:
- to access your data and obtain a copy (Art. 15);
- to have it corrected or completed (Art. 16);
- to have it erased, when it is no longer needed or there is no obligation to keep it (Art. 17);
- to restrict its processing (Art. 18);
- to receive it in a machine-readable format and transmit it to another provider (Art. 20);
- to object to processing based on legitimate interest (Art. 21).
Write to privacy@nanus.it: we reply within one month. If you believe your data is being processed unlawfully, you can lodge a complaint with the Italian Data Protection Authority (Garante).
8. Mandatory data
To create an account we need an email address and a password; for a subscription we need your company’s tax details. Without this data we cannot provide the service. All other data is optional.
9. Cookies
The website does not use cookies and the application uses only one technical cookie. Details are in the Cookie policy.
10. Changes
We may update this notice when the service or the law changes. The date at the top shows the latest revision; we will notify you of significant changes by email.