byNadiaBlanco™

Privacy Policy

SessionOS™ · Last updated 12 July 2026

This Privacy Policy explains how byNadiaBlanco™ ("we", "us", "our") collects, uses and protects your personal data when you use SessionOS™ ("the Tool"). We are the data controller for the purposes of UK data protection law (UK GDPR). If you have any questions, contact us at info@nadiablanco.com.

1. What we collect

We collect only what we need to provide the Tool:

• Your email address — used to create your account and log you in.
• Your password — stored securely in encrypted (hashed) form; we cannot see your actual password.
• Payment information — handled entirely by Stripe. We do not see or store your card details; we receive only confirmation of payment and your email.
• The work data you enter — such as your jobs, clients, day rates, call and wrap times, usage terms, expenses and invoice details. This is stored so the Tool works and syncs across your devices.
• Your invoice details — including the business name, address and bank details you choose to show on your invoices, and any logo you upload.

2. How we use it

We use your information to:

• Create and manage your account and give you access to the Tool;
• Store and sync the work data you enter across your devices;
• Generate the invoices you create;
• Process your payment and manage your subscription;
• Respond to support requests and contact you about your account if needed.

We do not sell your data, and we do not use it for advertising.

3. Your clients' information

SessionOS™ lets you store details about the productions and clients you invoice, such as a company name, billing address and accounts contact. You are responsible for that information and for having a proper basis to hold it. We process it only on your behalf, to provide the Tool and produce your invoices — we do not use it for any purpose of our own.

4. The services we use to run SessionOS™

To provide the Tool, we rely on a small number of trusted service providers who process data on our behalf:

• Supabase — securely stores your account and the work data you enter. Data is hosted in the United Kingdom (London region), and access controls ensure each user can only reach their own data.
• Stripe — securely processes your payment and subscription. Stripe handles your card details directly; we never receive them.
• Netlify — hosts the Tool and delivers it to your browser.

Each of these providers maintains its own security and privacy standards. Some data is also stored in your browser (local storage) so the Tool works quickly and continues to work offline.

5. Legal basis

We process your data to perform our contract with you (providing the Tool), to meet our legal obligations (such as keeping records of transactions), and where relevant, based on our legitimate interest in operating and improving the service.

6. How long we keep it

We keep your account and work data for as long as your account is active. If you ask us to delete your account, we will remove your personal data, except where we are required to keep certain records (for example, proof of transactions for tax purposes) for a limited period.

7. Your rights

Under UK data protection law you have the right to access the personal data we hold about you, to correct it, to request its deletion, to object to or restrict certain processing, and to request a copy of your data. To exercise any of these rights, email us at info@nadiablanco.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) if you are unhappy with how we handle your data.

8. Security

We take reasonable measures to protect your data, including encrypted passwords, secure hosting, and row-level access controls so that each user can only see their own jobs, clients and invoices. However, no online service can be guaranteed completely secure, and you share information with us at your own risk.

9. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be on this page, with the "last updated" date shown above.

10. Contact

The data controller for the personal data described in this policy is byNadiaBlanco™, a sole trader based in the United Kingdom.

For any privacy questions or requests, email us at info@nadiablanco.com, or write to us at:

byNadiaBlanco™
167-169 Great Portland Street
5th Floor
London W1W 5PF
United Kingdom