This policy explains what happens to your data when you use Session Nail Artist AI™ ("Session AI", "we"). It is written to be read, not to be skimmed past. Session AI is operated by byNadiaBlanco™.
byNadiaBlanco™
167–169 Great Portland Street, 5th Floor, London W1W 5PF
info@nadiablanco.com
We are the data controller for the personal data described below.
Session AI is an AI tool. The text you type into it is sent to OpenAI, in the United States, so that a reply can be generated and returned to you.
We do not store what you type. We do not read it. It is not used to train any AI model. But it does leave our systems in order to be processed — so please don't paste in anything you would not be willing to send through an ordinary email provider.
Everything below explains this in more detail.
Your account. When you buy Session AI you create an account with your email address and a password you choose. We store your email address. Your password is stored in hashed form by our authentication provider — we never see it and cannot recover it.
A record that you paid. We store your email address, the fact that a payment succeeded, and a Stripe reference, so that we can give you access and restore it if you're ever locked out.
The text you type into the tool. This is the part that matters most, so we'll be exact about it:
Payment information. We never see or store your card details. Payments are handled entirely by Stripe. We receive only your email address and confirmation that the payment went through.
Session AI is a writing tool for professional communication. You will often be describing real situations involving real people — agencies, photographers, clients, colleagues.
You don't need to include their identifying details for the tool to work well. Before you paste something in, take a moment to remove:
The reply will be just as good without them. If you do paste in someone else's personal information, you are the one responsible for having a lawful basis to do so.
We do not sell your data. We do not use it for advertising. We do not build a profile of you.
Each is bound by its own data processing agreement with us. Processing by OpenAI involves a transfer of data to the United States; this is covered by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, which is the safeguard UK law requires for transfers of this kind.
Your account exists until you ask us to delete it. If you do, we delete your account and your login. The record of the transaction itself is kept for six years, because UK tax law requires it.
Your prompts are not kept by us at all, so there is nothing for us to delete.
Your account can only ever read its own record. Passwords are hashed. Connections are encrypted in transit. The AI is only reachable by someone who is logged in with a paid account. No system is perfectly secure, but we take reasonable measures to protect what you entrust to us.
Under UK GDPR you have the right to:
To exercise any of these, email info@nadiablanco.com. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Session AI does not use tracking or advertising cookies. It stores a session token in your browser so that you stay logged in. That is essential to the service and there is nothing to opt out of.
If we change this policy we will update the date at the top of this page. If a change is significant — particularly anything affecting what happens to the text you type in — we will tell you by email.