← Back to home

Privacy policy

Data controller

The data controller is the company operating Nitor. The full contact details of the controller and of the privacy contact person will be provided in the final version of this notice.

Data sent with the upload form

When you upload an Excel file we ask for your business email, a description of what you would like to manage and, optionally, a phone number. We use this data, together with the uploaded file, exclusively to analyze your request and get back to you about the outcome. Beyond what is described below, it is not shared with third parties nor used for marketing purposes. The file analysis is automated and may rely on an artificial-intelligence provider (Anthropic): for this purpose the column names and up to three sample values per column are transmitted — never the full file. If the file has a structure that the automated analysis cannot interpret, the first 100 rows of each sheet of the file (the cell values) are also transmitted, for the sole purpose of identifying its structure; your email address, phone number and the description of your request are never transmitted. The provider does not use this data to train its models and retains it for a maximum of 30 days.

Usage statistics (Google Analytics 4)

We use Google Analytics 4 in Consent Mode: measurement cookies (_ga, _ga_*) are set only after your consent through the banner. If you decline or ignore the banner, Google only receives anonymous, aggregated statistics, with no cookies or identifiers. We do no advertising profiling or remarketing.

Session recording (Microsoft Clarity)

With your consent we use Microsoft Clarity to record browsing sessions — movements, clicks, scrolling and text typed into forms — and to build heatmaps, so we can understand how the site is used and improve it. Recordings may therefore include the data you type (such as your email or phone number) even if you do not submit the form. Data is processed by Microsoft, which adheres to the EU-US Data Privacy Framework; recordings are kept for up to 30 days and aggregated data for up to 13 months. Measurement cookies (_clck, _clsk) are set only after your consent, which you can withdraw at any time from "Cookie Preferences". The Microsoft privacy statement applies.

Technical cookies

To remember your language choice we use the technical cookie NEXT_LOCALE, which is necessary for the proper use of the site in its two languages (Italian and English): it is not a profiling cookie and does not require consent. If you reach the site from an advertising campaign, we additionally store — for the duration of the browser session only (sessionStorage) — the origin of the visit (the utm_source parameter), with no personal identifier, so we know which channel a request comes from.

Spam protection (reCAPTCHA)

The upload form is protected by Google reCAPTCHA, subject to the Google Privacy Policy and Terms of Service.

Your rights

You can request access to, rectification or deletion of your data at any time by writing to the controller's contact details. You can change your cookie choice from the "Cookie Preferences" link at the bottom of the main page.