Awaiting counsel review. Structure and substance below are how the system actually works; the statutory wording is being drafted with Lithuanian counsel before launch.
This notice covers people who visit this site and merchants who use Nellie. If you are a shopper who received a text, the shop that messaged you is the data controller – start with our page for shoppers, which explains it in plain language and shows you how to opt out.
For this website and merchant accounts: us. For shopper conversations: the shop.
For shopper data we act on the shop's instructions, under our DPA.
From merchants: contact details, store details, billing information, and the store data Nellie needs (catalogue, carts, orders, customer contact details and consent records). From site visitors: only what the cookie notice describes, plus anything you type into a form. The calculator sends nothing anywhere – it is arithmetic in your browser.
To provide the service (contract), to bill correctly and keep the audit trail (legal obligation and legitimate interest), to answer you when you get in touch, and to improve how she writes. Marketing to merchants only with consent.
Only the subprocessors we list publicly – hosting, messaging rails, AI inference, payments – each under contract and named, with notice before the list changes. We do not sell data and we do not use one merchant's data to benefit another.
Hosted in the EU. Conversation history and consent records are kept while the account is active and for the period we must retain proof of consent afterwards; the exact schedule is in the DPA. Anything else is deleted when it stops being needed.
Access, correction, deletion, portability, objection, and complaint to your supervisory authority – in Lithuania, the State Data Protection Inspectorate. Write to privacy@trynellie.com and we will respond within one month, usually much sooner.