Last updated: September 2026 · GDPR compliant (EU Regulation 2016/679)
ExNihiloLab
Email : [email protected]
Contact données personnelles : [email protected]
The data collected relates to your free trial account (created with email + password, or via Google Sign-In), to your monitoring activity on the service, and — if you use it — to the request form on the home page:
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Create and manage your account, deliver your alerts | Performance of contract (free trial) | 3 years after last account activity | |
| Password (stored hashed — argon2id —, never in plain text; absent if you sign in with Google) | Authenticate your access to the account | Performance of contract (free trial) | Lifetime of the account |
| Verified email provided by Google (if "Continue with Google") | Create or link your account without a password | Performance of contract (free trial) | Lifetime of the account |
| Monitoring configuration (followed outlets, keywords, alert rules) | Provide the monitoring service and trigger your alerts | Performance of contract (free trial) | Lifetime of the account |
| Request form (name, email, request type, message) | Answer your request and prioritise our roadmap | Legitimate interest (responding to an inbound request) | 12 months after the request |
| Transcripts and audio excerpts of the outlets you monitor (detected fragment + surrounding context) | Detect your keywords, provide the written context and an audio excerpt attached to the alert | Performance of contract (free trial) | Transcripts deleted automatically within a few days (48 h after notification, 8 days maximum); audio excerpts not retained after the email is sent |
| Email delivery log (recipient address, timestamp) | Enforce your daily email quota and trace deliveries | Performance of contract; legitimate interest (security, abuse prevention) | 7 days |
| Technical connection data (IP address, server logs) | Ensure security, prevent abuse (rate limiting) and keep the service running | Legitimate interest (service security) | Short-rotation logs (a few days) |
We use no tracking or advertising cookies and carry out no behavioural profiling. We neither seek nor infer any sensitive data about you within the meaning of Article 9 of the GDPR; transcripts may, however, incidentally contain statements broadcast on air (see below).
The service transcribes the radio and TV streams you choose to monitor. These transcripts may contain personal data of individuals mentioned on air (names, statements). They are processed solely to detect your keywords and give you the surrounding context, are never used for profiling, and are deleted automatically within a few days. Any individual concerned may contact us at [email protected] to exercise their rights.
Your data is shared with the following sub-processors, solely for the purposes of their role:
| Sub-processor | Role | Location |
|---|---|---|
| Resend | Transactional and alert email delivery (your email address and alert contents transit through this provider) | United States (EU SCCs) |
| Google (Sign-In) | "Continue with Google" authentication — only if you choose this sign-in method | United States (EU SCCs) |
| Hostinger | Website hosting | European Union |
| Formspree | Receiving and forwarding messages from the request form | United States (EU Standard Contractual Clauses) |
| hCaptcha | Anti-bot protection of the request form | United States (EU Standard Contractual Clauses) |
| Cloudflare | DNS resolution and access control for the administration interface (IP addresses, connection metadata) | United States (EU Standard Contractual Clauses) |
Your data is never sold, rented or transferred to third parties for commercial purposes.
Your account data is hosted in the European Union. Resend (emails), Google (authentication, if used), Cloudflare (DNS and admin access), Formspree and hCaptcha (request form) are US-based companies: transfers to these providers are governed by Standard Contractual Clauses approved by the European Commission, in accordance with Article 46 of the GDPR.
Under the GDPR, you have the following rights regarding your personal data:
Obtain a copy of the data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your data ("right to be forgotten").
Receive your data in a structured, machine-readable format.
Object to processing based on our legitimate interest.
Request temporary suspension of a processing activity.
To exercise these rights, contact us at: [email protected]. We respond within 30 days. You may also lodge a complaint with your national data protection authority.
This site uses no tracking or advertising cookies. The dashboard sets a single technical refresh_token cookie (HttpOnly, inaccessible to JavaScript) that maintains your session — strictly necessary for the service, it is exempt from consent under the ePrivacy Directive and expires with your session. hCaptcha may set technical cookies strictly necessary for its anti-bot operation on the request form, which are also exempt from consent.
This policy may be updated to reflect legal changes or changes in our practices. The last update date is shown at the top of this page. For material changes, affected parties will be notified by email.
For any question about the protection of your personal data:
[email protected]
ExNihiloLab — exnihilolab.com