Privacy Policy
The short version
Your data stays in Switzerland. We follow GDPR and Swiss DPA. We don't sell your data. Ever.
Data Controller
BULLES D'ESPRIT SARL
24 route des Tourneurs, 17100 SAINTES, France
SIRET: 799 933 932 00045
Email: contact [@] nefa.io
What We Collect
- Account data: Name, email, phone, billing address
- Payment data: Processed by PCI-DSS certified providers
- Technical data: Server logs, IP addresses, performance metrics
- Hosted files: Whatever you upload to your hosting space
Why We Collect It
- To provide hosting services
- To bill you and handle accounting
- To provide support
- To prevent fraud and abuse
- To comply with legal obligations
We don't sell your data. Not to advertisers, not to anyone.
Swiss Hosting
All data is hosted in Switzerland. Swiss Data Protection Act (DPA) is one of the strictest in the world. Switzerland has an adequacy decision from the EU, meaning it's GDPR-equivalent.
Your Rights
Under GDPR and Swiss DPA, you can:
- Access your data
- Rectify incorrect data
- Delete your data (subject to legal obligations)
- Port your data to another provider
- Object to processing
- Limit processing
To exercise these rights: contact@nefa.io
We'll respond within 30 days.
Data Retention
- Active accounts: Duration of service + 1 year
- Billing data: 10 years (legal requirement)
- Server logs: 12 months max
- Support data: 3 years after last contact
Cookies
We use only technical cookies necessary for the service to work. No consent required.
No advertising cookies. No third-party tracking.
Changes
We may update this policy. You'll be notified by email 30 days before substantial changes.