Security and data
Each point says where it stands. What is not done is written as such: a promise not kept is worse than no promise at all.
An assistant reads texts it does not control; a planted instruction could make it call a tool. We do not rely on its caution: what it must not do, it has no means of doing.
Reading, adding, changing one’s own data: the assistant acts at the user’s request. Every tool declares its nature — read, write or delete.
The assistant asks; the human confirms outside the assistant, on a Nano page, with a code sent to the account’s phone number. Today: deleting the account.
Billing, subscriptions, prices, activation codes, countries: no assistant tool gives access to them. These operations are run by a human, through scripts on the server.
Limit: deleting an item inside a product (a record, a note) stays in the first circle until there is a recycle bin and roles.
In progress: real sending of codes by text message — built, being put into service. Today, sign-in is open to demonstration numbers only.
In progress: physically separating the service from administration, in two distinct databases, with no cross access rights. The architecture is approved; it is being built.
In progress: a product under test is served only to named testers, and its release goes through a validation signed on the exact fingerprint of its tools — built, being put into service.
| Data | Period |
|---|---|
| Account and data entered | One year after last use; the user is warned a month before. |
| Item deleted by the user | Immediately. |
| Backups | 14 days at most. |
| Tool-call log | 12 months. |
| Server system log | 30 days. |
| Sign-in code sending records | 2 days. |
| Expired tokens and codes | 7 days after expiry. |
| Accounting records | 10 years (legal obligation), detached from the deleted account. |
| Provider | Role | Location |
|---|---|---|
| OVH SAS | Server, database, backups, domain names | France |
| Brevo (Sendinblue SAS) | Sending e-mails | France and Belgium; some of its own providers outside the EU (United States, India), covered by standard contractual clauses |
| Microsoft | Mailbox receiving support@fmnano.com | European Union, under Microsoft’s “EU Data Boundary” commitment; possible transfers to the United States, safeguarded |
By default, Brevo inserts a pixel that measures whether e-mails are opened. We are working to switch it off; meanwhile, the privacy policy says so.
The assistant (OpenAI, Anthropic, Mistral…) is not our processor: the user chooses it and entrusts their conversation to it, under its publisher’s rules.
The documents cited on this page — record of processing, processors, procedure — can be provided to an institution considering a pilot: ask for them.
The service’s privacy policy is published on fmnano.com.