This Notice describes how Nomisma LLC processes personal data collected through the actaa.ai website; personal data processed within the Actaa service is governed separately by the Actaa Platform Privacy Policy.
01 Scope
This Website Privacy Notice (the “Notice”) describes how Nomisma LLC (“Nomisma,” “we,” or “us”) processes personal data collected through its marketing website at actaa.ai (the “Website”).
This Notice applies only to the Website. It does not apply to personal data processed within the Actaa service. Where a company uses Actaa, personal data processed within the service is governed by the separate Actaa Platform Privacy Policy and not by this Notice.
Nomisma LLC is a limited liability company formed in the State of Wyoming, United States, and is the controller of the personal data described in this Notice.
02 Information We Collect
Nomisma collects a deliberately limited amount of information through the Website. There are two categories: information the User chooses to send, and the standard server logs described below.
Information the User sends to us
The Website has one contact form, at /contact, and also publishes an email address. Whichever route the User chooses, the User decides what to send: the form asks for a name, an email address, an optional company name, a topic and a message, and nothing is collected from the User anywhere else on the Website. Nomisma then holds what the User chose to send, typically:
- name;
- work email address;
- company; and
- the message the User elects to provide.
The form sends the entry to Nomisma’s own Actaa workspace at one-api.actaa.ai, where it is stored as a sales contact, and a notification goes to info@actaa.ai. No third party receives it. The User may instead write to info@actaa.ai by email.
Server logs
The content delivery network that serves the Website (Amazon CloudFront, operated for Nomisma in Nomisma’s own AWS account) keeps standard access logs: the page requested, the time, the HTTP status, the referring page, the browser’s user-agent string, the country, and the visitor’s IP address. Nomisma uses these logs in aggregate to see which pages are read, where visitors come from, and how search engines and AI assistants crawl the site. Logs are deleted after 30 days. They are never joined with form entries and never used to identify or follow a person.
Once a day the logs are reduced to a small file of counts: visits per page, per referring site and per country, and visits by search-engine and AI crawlers. The file is published at www.actaa.ai/stats/actaa-stats.json and keeps the last 14 days. To count distinct visitors, the IP address and user-agent are passed through a one-way hash that exists only while that day is counted and is never stored. The file holds no IP address, no user-agent and nothing about any single visit. Nomisma reads these counts, and the search-engine reports described below, in a private staff dashboard at site.actaa.ai, hosted in the same AWS account.
No analytics, no cookies
No third-party requests
Every asset the Website loads is served from Actaa’s own domain: fonts, stylesheets, scripts, images and video. The Website makes no requests to third-party servers, so no third party receives a visitor’s IP address, User-Agent or referring page as a result of loading it. Web fonts and animation libraries are self-hosted specifically so that loading a page does not disclose the visit to anyone else. The contact form posts to one-api.actaa.ai, Actaa’s own service.
The browser will cache those files, as it does for any website. Nothing in that cache identifies the visitor or is read back for tracking.
Search-engine reports
Google Search Console and Bing Webmaster Tools give Nomisma reports on how the Website appears in their search results: the search terms that showed it, clicks, impressions, average positions, and crawl and indexing status. These are aggregate statistics that Google and Microsoft compile from their own services under their own privacy policies. They contain nothing that identifies a visitor, and the Website sends nothing to Google or Microsoft to produce them. The Website also tells search engines when pages change (IndexNow), which sends page addresses only.
Do Not Track
Because the Website performs no tracking of any kind, there is nothing for a Do Not Track (DNT) signal to switch off, and DNT signals therefore have no effect on how the Website behaves: no visitor is tracked whether the signal is sent or not. Global Privacy Control (GPC) signals are honoured as opt-out requests where the CCPA/CPRA applies, as described under “Your Rights”.
No third party collects personally identifiable information about a visitor’s online activities across different websites or services through this Website.
03 Purposes of Processing
Nomisma processes the information described above in order to respond to a User’s early-access request or other enquiry and, where relevant, to contact the User regarding early access and related product updates.
Nomisma does not use this information to construct advertising profiles, to make automated decisions producing legal or similarly significant effects, or to track Users across other websites.
04 Legal Bases Under the GDPR
Where the EU or UK General Data Protection Regulation (the “GDPR”) applies, Nomisma relies on the following legal bases:
- Early-access requests — to take steps at the User’s request in response to the enquiry, and Nomisma’s legitimate interest in evaluating and responding to interest in Actaa.
- Server logs — Nomisma’s legitimate interest in operating, securing and understanding use of the Website (Article 6(1)(f)); the logs are minimal, short-lived and read in aggregate.
Nomisma does not rely on consent under Article 6(1)(a) for any Website processing, because the Website sets no cookies and runs no analytics. Enquiries sent through the form or by email, and the server logs, are the only personal data the Website leads to.
Where Nomisma relies on legitimate interests, it has weighed those interests against the rights and interests of the data subject. A data subject may object to processing based on legitimate interests, as described under “Your Rights” below.
05 No Sale, Sharing, or Marketing Use
Nomisma does not sell personal data and does not “share” personal data for cross-context behavioral advertising. Nomisma does not add a User to marketing lists solely on the basis that the User has made contact.
Nomisma does not disclose personal data to third parties except to the service provider that hosts the Website on its behalf, as described under “Data Storage and Hosting”, or where disclosure is required by law.
06 Data Storage and Hosting
The Website and the data it collects are hosted on Nomisma’s own Amazon Web Services (AWS) infrastructure located in the United States. AWS acts as Nomisma’s hosting provider (a processor or sub-processor) and does not use this data for its own purposes.
07 Data Retention
Nomisma retains early-access messages while it evaluates the User’s interest and for a reasonable period thereafter, after which they are deleted. Exact retention period: up to twenty-four (24) months from the date the User sent the message, or until the User requests deletion, whichever occurs first.
Server logs: thirty (30) days, then deleted automatically. Daily counts in the published stats file: the last fourteen (14) days; they contain no personal data. No analytics data exists beyond those logs and counts.
08 Your Rights
Depending on the data subject’s jurisdiction, the following rights may apply.
Under the GDPR (EU and UK)
- Access — to obtain a copy of the personal data held about the data subject;
- Rectification — to request correction of inaccurate personal data;
- Erasure — to request deletion of personal data (Article 17);
- Portability — to receive personal data in a portable, machine-readable format (Article 20); and
- Objection — to object to processing based on Nomisma’s legitimate interests.
Under California law (CCPA / CPRA)
- the right to know the personal information collected and the purposes for which it is used;
- the right to delete personal information held about the consumer;
- the right to opt out of the sale or sharing of personal information, noting that Nomisma does not sell or share personal information; and
- the right not to be subject to discrimination for exercising these rights.
Nomisma honors the Global Privacy Control (GPC) signal as an opt-out request. To exercise any of these rights, a data subject may contact Nomisma using the details set out under “Contact.” Nomisma will respond as required by applicable law. A data subject also has the right to lodge a complaint with the competent data-protection authority.
Nomisma does not sell or share personal information, and has not done so in the preceding twelve months. It does not sell or share the personal information of consumers it knows to be under 16.
Shine the Light (California Civil Code § 1798.83)
California residents may ask a business once a year whether it disclosed their personal information to third parties for those third parties’ own direct-marketing purposes. Nomisma makes no such disclosures, and did not do so in the preceding calendar year. Requests under this section may be sent to the address under “Contact.”
09 International Transfers
Nomisma is established in the United States and hosts the Website’s data in the United States. Where a User makes contact from the European Economic Area, the United Kingdom, or another jurisdiction, personal data will be transferred to and processed in the United States. Where required for such transfers, Nomisma relies on the European Commission's Standard Contractual Clauses and, for the United Kingdom, the International Data Transfer Addendum. Where Nomisma is required to designate an EU or UK representative under Article 27, it will identify that representative in this Notice.
10 Children’s Privacy
The Website is intended for businesses and professionals. It is not directed to children, and Nomisma does not knowingly collect personal data from any person under the age of 16. If a parent or guardian believes that a child has provided personal data through the Website, they may contact Nomisma, and the data will be deleted.
11 Amendments
Nomisma may amend this Notice from time to time. Upon any amendment, Nomisma will revise the “Last updated” date set out at the top of this page. Material changes will be reflected in this Notice, which data subjects are encouraged to review periodically.
12 Contact
Questions regarding this Notice, or requests to exercise privacy rights, may be directed to info@actaa.ai.
Nomisma LLC — a Wyoming limited liability company, USA. Contact: info@actaa.ai.