Privacy

Who we are

Nymatic is an AI and software engineering partner with hubs in Windsor, Ontario, Canada and Beirut, Lebanon. This policy covers nymatic.io and the forms, booking, chat and analytics on it. It does not cover the software we build for clients, which runs under each client’s own policies.

Questions, requests and complaints about personal information go to info@nymatic.io. The person in charge of the protection of personal information at Nymatic is a co-founder, reachable at the same address.

What we collect, and why

• Forms. When you use the project planner, send a brief or book a call, we collect what you type: your name, work email, company, and what you are building. We use it to reply, to prepare the call and to run the engagement if we work together. Legal basis: your request.
• Booking. Calls are scheduled through Cal.com. Cal.com receives your name, email and the time you pick, and sends the calendar invitation.
• Chat. Ask Nymatic runs on Gleap, hosted in the European Union. If you start a conversation we keep the transcript, and your name and email if you give them, so we can follow up.
• Analytics, only with your consent. We use PostHog, hosted in the European Union, to see which pages help and to replay anonymous sessions. Text you type in forms is masked and never recorded. Nothing is sent until you choose “Accept analytics”, and you can change that choice at any time from the footer.
• Site protection. Cloudflare Turnstile checks that form submissions come from people, and a rate limit counts requests per address for a few minutes to stop abuse. Error monitoring with Sentry records technical details of a failure, such as the page and browser, so we can fix it.

We do not run advertising, sell or rent personal information, or buy data about you from anyone.

Who processes it for us

These providers process personal information on our behalf, under their standard data processing terms, only to deliver the service named:

• Vercel, hosting and delivery of the site, with server logs kept for a short period.
• Attio, our customer relationship system, where leads and conversations with prospective clients are kept.
• Resend, which sends our transactional emails, such as the confirmation after you send a brief.
• Cal.com, booking. Gleap (EU), chat. PostHog (EU), analytics after consent.
• Cloudflare, bot protection. Upstash, rate limiting. Sentry, error monitoring.
• Sanity, our content system, which holds site content only, not visitor data.

Some of these providers are outside Canada and may process data in the United States or the European Union. Where that is the case, the transfer is covered by their contractual commitments to protect it to a comparable standard.

How long we keep it

• Briefs, planner answers and booking details: for as long as we are in contact about a possible or current engagement, and up to three years after the last exchange.
• Chat transcripts: up to twelve months, unless they become part of an engagement.
• Analytics: up to twelve months, in aggregate after that.
• Server and error logs: a few weeks.

Cookies and local storage

Essential: your cookie choice, and a short-lived token that protects forms from abuse. Optional, after consent: PostHog’s analytics identifiers. The chat widget stores a session identifier so a conversation can continue when you come back. There are no advertising cookies.

Your rights

You can ask what personal information we hold about you, have it corrected or deleted, withdraw consent to analytics, or object to how it is used. Write to info@nymatic.io and we answer within thirty days. You can also complain to the Office of the Privacy Commissioner of Canada and, in Quebec, to the Commission d’accès à l’information.

Changes

When this policy changes, the date at the top changes with it. Material changes are noted on this page for thirty days.