NYX Verified Nim Skills
legal

Privacy

  • Version 1.0
  • Effective

In short

This site sets no cookies, runs no analytics and loads no third-party scripts or fonts. To deliver the subscription we process your email, your GitHub username, and the billing details Polar shares with us. Nothing is sold or used for advertising, and no decisions about you are made by automated means.

Who is responsible

GERALIS A KAI SIA L.P., Makedonika, 34100 Chalkida, Greece, is the controller for the data described here. Full company details are in the terms. Contact: verified.nim@gmail.com. We have not appointed a data protection officer, as the law does not require one for this processing.

This website

The site is static and hosted on GitHub Pages by GitHub, Inc. (USA). GitHub may log requests, including IP addresses, for security and operation, as described in the GitHub Privacy Statement. We do not receive or use those logs. Checkout buttons are plain links to Polar's checkout page; nothing from Polar loads until you click one.

Billing data (Polar)

Polar Software, Inc. (USA) is the merchant of record and processes your payment as an independent controller under its own privacy policy. We never see your full card details. Polar shares with us what we need to run the subscription: your name, email, country, company and VAT ID if you gave them, subscription status, your checkout consent, and invoice records. Legal basis: performance of the contract (GDPR Art. 6(1)(b)), and our legal obligations for tax and accounting records (Art. 6(1)(c)).

GitHub username

When you connect GitHub in Polar's customer portal, Polar learns your GitHub username and uses its GitHub App to invite that account to the private repository with read access, and to remove it when the subscription ends. The OAuth connection proves identity only; no GitHub token reaches us or NYX. We see your username as a collaborator on the repository. GitHub processes repository access and activity under its own privacy statement. Legal basis: performance of the contract.

Email

If you email us, we keep the correspondence to answer you and to handle support, team seats, withdrawals and invoices. Legal basis: performance of the contract, or our legitimate interest in answering enquiries (Art. 6(1)(f)). We send no newsletters unless you ask for them.

NYX

NYX runs on your machine and has no telemetry. It runs git against the repository you configure, so GitHub sees those requests as it would any git clone or pull.

Recipients and international transfers

Data is shared only with: Polar (billing, as above); GitHub (site hosting and repository access); our email provider, which processes correspondence on our behalf; and our accountant and the Greek tax authorities where the law requires. Polar and GitHub are in the USA. GitHub is certified under the EU-U.S. Data Privacy Framework and its UK extension; Polar relies on the safeguards described in its privacy policy, such as the European Commission's Standard Contractual Clauses. Ask us for details of the safeguards that apply.

Retention

  • Invoice, payment and checkout-consent records: as long as Greek tax and accounting law requires, generally five years from the end of the year concerned, longer if the tax audit period is extended.
  • Subscription records (GitHub username, seats, status): while you subscribe and for two years afterwards, to handle questions, disputes and chargebacks.
  • Correspondence: two years after the last message, unless needed longer for a claim or for tax records.
  • Repository access is removed when the subscription ends.

Your rights

Under the GDPR (and the UK GDPR) you may request access to, correction of, deletion of, or a portable copy of your data, restrict processing, and object to processing based on legitimate interests. Email verified.nim@gmail.com; we answer within one month. Providing your email and GitHub username is necessary to deliver the subscription; without them we cannot grant access. For data held by Polar or GitHub, you can also contact them directly. You may complain to the Hellenic Data Protection Authority (Kifissias 1–3, 115 23 Athens, dpa.gr) or the supervisory authority where you live or work.

We will update this notice if our processing changes; the version and effective date are shown at the top of this page.