Privacy Policy

This policy explains what personal data d-nvest collects, why, and what you can do about it. It describes what the product actually does — not a generic template.

1. Who is responsible

The data controller is D-NVEST LIMITED (Companies Registration Office (CRO), Ireland no. 750862), registered office: Pod 2, The Old Station House, 15a Main Street, Blackrock, Co. Dublin, A94 T8P8, Ireland. For any question about this policy or to exercise your rights, contact us via the contact page.

2. Audience measurement is opt-in — and off until you accept

We use first-party analytics only. There are no third-party advertising trackers on this site, and we do not sell personal data.

Measurement does not start until you explicitly accept it in the banner. Until then — and permanently if you decline — no visitor identifier is created and no measurement data is sent. Your choice is stored locally and can be changed at any time by clearing your browser storage for this site.

We also honour the Do Not Track and Global Privacy Control browser signals: if either is enabled, no measurement takes place even if consent was previously given. Traffic identified as automated (bots and crawlers) is excluded.

3. What we collect, and on what basis

Strictly necessary

A session token that keeps you signed in, and your language preference. These are always active — the service cannot work without them — and are not used for measurement. Basis: necessary to provide the service you requested.

Audience measurement

Only after you accept: pages viewed, clicks, scrolling and time spent, approximate country, device, browser and operating system, the referring site, and campaign parameters in the URL. Two pseudonymous identifiers are used — one for the visit, one persistent for the browser. Basis: your consent.

Your IP address

Your IP address is never stored in readable form for analytics. It is converted into a salted, one-way fingerprint used to distinguish visits and filter abuse. The one exception is described in section 5 (signature evidence).

Account

Your email address and the details you provide. If you sign in with Google or LinkedIn, we receive only your basic profile and email address — never access to your mailbox, contacts or connections. Basis: performance of our contract with you.

Payments

Payments are processed by Stripe. We never receive or store your card number. Basis: performance of contract.

Business contacts

We identify professional contacts at organisations that may hold or seek data, using publicly available sources, and we may contact them about our service. This concerns people in their professional capacity only. Basis: our legitimate interest in B2B outreach — you may object at any time and we will stop and record the exclusion.

Emails we send

Business emails we send may contain a tracking pixel and tracked links, so we can see whether a message was opened or a link followed. Blocking remote images in your email client prevents open tracking.

4. Cookies and local storage

We do not use advertising or third-party tracking cookies. We use your browser's local storage for three purposes: keeping you signed in, remembering your language, and remembering your analytics choice. Measurement identifiers are only created once you have accepted.

5. Deal rooms and signature evidence

When you sign an agreement through a deal room, we record who signed, when, and the IP address used. This IP address is deliberately stored in readable form: it is contractual evidence that the signature took place, and a fingerprint would not serve that purpose. Basis: performance of contract and establishment of legal claims.

6. Automated analysis and AI

We use Google Vertex AI (within Google Cloud) to analyse publicly available information and to generate reports and summaries. Content sent for analysis is processed under Google Cloud's data processing terms. We do not use your personal data to train models of our own.

7. Who else processes your data

We rely on a small number of service providers acting on our instructions: Google Cloud (hosting, database and AI processing, in the European Union), Google Workspace (sending and receiving our business email), and Stripe (payments). Where data is transferred outside the European Economic Area, it is covered by the safeguards those providers offer, including the European Commission's standard contractual clauses.

8. How long we keep it

Measurement data

Up to 25 months from collection, then deleted or aggregated into anonymous statistics.

Account data

For as long as your account exists, and up to 3 years after your last activity.

Contracts and signatures

For the period required to establish, exercise or defend legal claims, and to meet our accounting obligations.

Exclusion requests

Kept for as long as necessary to make sure we do not contact you again.

9. Your rights

Under the GDPR you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, and portability. Where processing is based on our legitimate interest — including business outreach — you may object at any time. Where it is based on consent, you may withdraw it at any time without affecting past processing.

Note that measurement identifiers are pseudonymous: if you have never signed in, we may be unable to link them to you, and may need additional information to act on a request.

You also have the right to lodge a complaint with a supervisory authority — in our case the Data Protection Commission in Ireland (dataprotection.ie).

10. Security

Data is hosted on Google Cloud in the European Union. Access is restricted to the people who need it, credentials are held in a managed secret store, and traffic is encrypted in transit. No system is perfectly secure, but we design for the principle that the less we store, the less can be exposed.

11. Children

d-nvest is a business service and is not directed at children. We do not knowingly collect personal data from anyone under 16.

12. Changes

We may update this policy. Material changes will be reflected on this page. See also our terms of use and legal notice.