Privacy policy
Last updated: September 2026
1. Data controller
Niteo, based in Strasbourg, France, is the data controller for personal data collected through the website niteo.io.
Contact: hello@niteo.io
2. Data we collect
We only collect data that you voluntarily provide:
• Through the contact form: name, email address, company name (optional), subject and message content
• Through the "We'll call you back" form on our offer pages: phone number and work email address, along with the page and button you used, the page that referred you to our site and, where present, campaign parameters in the address (for example utm_source)
To protect these forms against abuse, your IP address is used temporarily (a few minutes) to limit the number of submissions; it is not stored with your request.
With your consent, we also use analytics tools that collect browsing data such as pages visited, visit duration, and device type.
3. Purpose of processing
Your data is used exclusively to:
• Call you back by phone when you ask us to, and email you about that request
• Respond to your contact requests
• Follow up on our business exchanges
• Measure which pages and campaigns generate requests
• Improve our website through analytics data
Your data is never sold or used to add you to a mailing list.
4. Legal basis
The processing of your data is based on:
• Steps taken at your request prior to entering into a contract, when you ask to be called back (Article 6.1.b GDPR)
• Your consent when submitting the contact form (Article 6.1.a GDPR)
• Your consent, given through the cookie banner, for analytics tools (Article 6.1.a GDPR)
• Our legitimate interest in protecting our forms against abuse (Article 6.1.f GDPR)
5. Data retention
Callback and contact requests are retained for the time necessary to process your request and maintain the business relationship. If no business relationship follows, they are deleted no later than three years after our last exchange. You can ask for their deletion at any time.
IP addresses used against abuse are deleted automatically after a few minutes.
6. Your rights
Under the GDPR, you have the following rights:
• Right of access to your personal data
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
To exercise these rights, contact us at hello@niteo.io. We will respond within 30 days.
7. Cookies and analytics
Our website uses analytics tools, loaded through Google Tag Manager, to understand how visitors use the site. These tools only place cookies after you consent, through the banner shown on your first visit.
You can accept, refuse or customise your choices in that banner, and configure your browser to refuse cookies or to alert you when a cookie is being placed.
8. Recipients and processors
Your data is accessible only to the Niteo team and the person in charge of calling you back. To run, the site relies on the following providers, which process data on our behalf:
• Vercel — website hosting
• Supabase — database where requests are stored (servers in the European Union, Paris)
• Resend — sending the internal email that notifies us of each request
• Upstash — rate limiting against abuse
• Google (Tag Manager, Analytics) — audience measurement, only with your consent
Some of these providers are based in the United States. Where data is transferred outside the European Union, the transfer is covered by the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.
Questions about your data?
If you have any questions about this privacy policy or how we handle your personal data, feel free to reach out.
hello@niteo.io