Nest Privacy Policy

Srpska verzija

This Privacy Policy explains what personal data is involved when you use Nest, what Albedo One does and does not collect, and the rights you may have. It should be read alongside the Nest End User License Agreement, published at https://nest.getalbedoone.com/eula.html.

1. Our approach: local-first and data-minimizing

Nest is local-first desktop software. It is designed so that documents and the information you add to them remain on your computer and are not transmitted to Albedo One during normal use.

In this Policy, “Albedo One” refers to Dejan Stanojević acting as the Data Controller under that name. The Controller collects as little personal data as reasonably possible for selling licenses, providing support, maintaining security, and complying with law. Nest does not require an account, contain advertising, or include in-app analytics or behavioral tracking controlled by the Controller.

2. Data stored on your device

The following are stored locally and are not transmitted to Albedo One during normal use:

• original documents and copies kept in the Nest library;
• filenames, titles, dates, categories, sources, tags, and notes;
• text extracted from documents, including text produced by OCR;
• thumbnails and previews;
• the Nest library database and search index;
• the Nest license file; and
• local diagnostic logs.

Albedo One does not have remote access to this information. It may receive particular information only if you deliberately send it in a support message or diagnostic report, as described in Section 4. Information may also leave your device through third-party storage, synchronization, backup, email, security, or operating-system services that you choose or configure; those services are not controlled by Nest.

3. No in-app tracking

Nest does not include Albedo One analytics, usage tracking, advertising identifiers, behavioral profiling, or third-party tracking technologies inside the application.

Nest does not automatically connect to Albedo One to send usage information. A user-requested update check and information you deliberately send for support are described in Section 4. The operating system, installer, certificate-validation services, security software, file-sync tools, or other third-party components may make their own network requests under their own settings and policies.

4. Information received and when

Albedo One and the limited providers described in Section 6 may receive personal data in these situations:

a. Purchases and licenses

Nest licenses are sold through Lemon Squeezy, the Merchant of Record identified at checkout. Lemon Squeezy collects and processes payment and billing details under its own privacy notice. Albedo One does not receive or store full payment-card details.

Albedo One may receive order and license information needed to deliver and support a license, such as the buyer’s name, email address, product, order reference, license reference, transaction status, and relevant refund or chargeback status. The exact fields depend on the Merchant of Record and fulfillment method in use.

b. Support correspondence

If you contact Albedo One, it receives your contact details and whatever you choose to include. Do not send documents, document contents, passwords, license secrets, or other sensitive information unless specifically requested and you are comfortable sharing it.

If you deliberately attach a document or diagnostic material, Albedo One receives that attachment and processes it to address the request.

c. Diagnostic and error reports

Nest may allow you to create a diagnostic or error report that you can review, save, and choose to send using your own communication method.

Such a report is designed to include limited environment facts needed for diagnosis, such as the time, Nest version, operating-system version, .NET runtime version, processor architecture, and diagnostic logs. Nest’s logging and report-building process is designed to redact common identifiers such as user-profile paths, usernames, and document paths where detected.

Redaction is a risk-reduction measure, not a guarantee: arbitrary error messages or logs may still contain identifying or confidential information. A report is not designed to include document contents or extracted text, but review the report before sending it and remove anything you do not want to share.

d. Software updates

Nest does not automatically check for Nest updates. If you manually select “Check for updates,” Nest may request update information from an Albedo One endpoint. The request is not designed to include documents, library contents, license secrets, document counts, tags, notes, search terms, or a unique installation identifier.

As with a website request, the host may process standard technical data such as IP address, user agent, request time, and requested resource in server logs.

e. Websites and downloads

Albedo One’s Nest website does not intentionally use third-party advertising, behavioral analytics, tracking pixels, or tracking cookies. The hosting and download providers may process standard request data, including IP address, user agent, request time, and requested resource, to deliver, secure, and troubleshoot the service.

Where the hosting configuration provides aggregate statistics derived from request logs, Albedo One may use them to understand general traffic and download activity. Albedo One does not use those statistics to build individual visitor profiles.

5. How information is used

Albedo One uses the limited personal data it receives to:

• deliver licenses and confirm entitlement;
• provide support and respond to requests;
• diagnose, correct, and prevent product or licensing problems;
• protect Nest, customers, and the licensing system against fraud, abuse, tampering, and security threats;
• operate and secure websites and downloads; and
• comply with legal, tax, accounting, complaint-handling, and dispute obligations.

Albedo One does not sell personal data or use it for targeted advertising.

6. Providers and recipients

Data may be processed by:

• Lemon Squeezy, as Merchant of Record, for the sale, payment, tax, order, refund, and fraud functions described in its own terms;
• email and communication providers used to receive and answer messages;
• update, download, and website hosting providers used to distribute Nest and operate its websites; and
• professional advisers, public authorities, courts, or other recipients where reasonably necessary to establish or defend legal rights or comply with law.

Some providers act as independent controllers under their own notices; others process data for Albedo One. They receive only the information reasonably needed for their role. Provider identities, locations, and terms may change; current details may be requested using the contact in Section 14.

7. Legal bases

Where the GDPR, Serbian data-protection law, or similar legislation applies, processing is based on one or more of:

• contract or steps requested before contract—to deliver and support the purchased license;
• legitimate interests—to provide support, diagnose problems, secure the product and websites, prevent abuse, maintain necessary business records, and establish or defend claims, balanced against individual rights;
• legal obligation—to meet tax, accounting, consumer, regulatory, and lawful-authority requirements; and
• consent—only where consent is specifically requested and may legally be withdrawn.

Albedo One does not rely on consent merely because someone purchased or used Nest.

8. International processing and transfers

Albedo One is based in Serbia. Providers and customers may be located in Serbia, the European Economic Area, the United Kingdom, the United States, or other countries.

Some providers collect data directly as independent controllers under their own privacy notices. Where Albedo One is responsible for transferring personal data across a border and a transfer mechanism is legally required, it will use a mechanism appropriate to the destination and relationship, such as an adequacy decision, approved contractual clauses, or another lawful safeguard.

Information about a particular provider, destination, or applicable safeguard may be requested using the contact in Section 14.

9. Retention

Albedo One keeps personal data only while reasonably needed for the purpose for which it was collected and for applicable legal requirements.

Retention is determined using these criteria:

• order and license records may be kept while needed to support a perpetual license, prove entitlement, administer refunds or disputes, and satisfy tax, accounting, and limitation periods;
• support correspondence and diagnostic reports are kept while an issue is active and for a limited follow-up period based on the issue’s technical, security, and legal relevance;
• security, fraud, and dispute records may be kept for the period reasonably needed to investigate, prevent recurrence, or establish or defend claims; and
• website and download request logs are retained according to the configured host’s operational and security schedule.

When information is no longer needed, it is deleted or anonymized where reasonably practicable. Legal holds, unresolved disputes, and mandatory record-keeping may extend a period.

Data stored locally by Nest remains under your control until you delete it or the storage system removes it.

10. Individual rights

Depending on applicable law and the processing basis, you may have rights to:

• request access to personal data;
• correct inaccurate data;
• request erasure;
• restrict or object to certain processing;
• receive eligible data in a portable form;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a competent data-protection authority.

Send a request to hello@getalbedoone.com. Albedo One may request information reasonably necessary to locate records and confirm identity. Rights can be limited by applicable exceptions, including legal record-keeping and the rights of others.

For data controlled by a Merchant of Record or another independent controller, the request may need to be directed to that organization.

11. Security

Nest’s local-first design means most document information is not held by Albedo One. You are responsible for protecting your computer, user account, backups, library locations, and any third-party storage or synchronization services you use.

Albedo One applies reasonable measures to the limited information it receives and selects service providers with relevant security practices. No storage or transmission method is completely secure, and absolute security cannot be guaranteed.

12. Children

Nest is intended for adults and is not directed to children. Albedo One does not knowingly solicit personal data from children through Nest. If you believe a child has provided personal data, contact Albedo One so the situation can be assessed and appropriate action taken.

13. Changes to this policy

Albedo One may update this Privacy Policy to reflect changes in Nest, providers, operations, or law. The version and effective date will be updated. Material changes will be made available through the application or website and communicated directly where appropriate and reasonably possible.

14. Contact

Questions, rights requests, and privacy complaints may be sent to:

Email: hello@getalbedoone.com Data Controller: Dejan Stanojević, publishing software under the Albedo One name Geographic contact address: Dimitrija Tucovića 34, Apartment 6, 11120 Belgrade, Serbia Telephone: +381 65 221 4695 Telephone hours: Monday-Friday, 10:00-12:00 Belgrade time, excluding Serbian public holidays Website: https://nest.getalbedoone.com

Email is the preferred contact method and may be sent at any time. The address above is the geographic address for privacy and legal communications. Any additional representative or contact information required by applicable law must also be provided through the relevant website, checkout information, or direct communication.

Plain-English summary

This summary is for convenience. The numbered policy controls if the two conflict.

• Nest keeps documents, extracted text, notes, and the local library on your device during normal use.
• Albedo One receives document or diagnostic material only if you deliberately send it, such as in a support request.
• Nest has no Albedo One account requirement, ads, behavioral analytics, or in-app usage tracking.
• A manual update check may create a standard website request; Nest does not automatically check for Nest updates.
• Diagnostic redaction reduces risk but may not catch every identifier, so review a report before sending it.
• Purchase, support, website, and security providers process the limited data needed for their roles.
• Albedo One does not sell personal data or use it for targeted advertising.
• You may have rights to access, correct, delete, restrict, object to, or obtain eligible personal data.