PRIVACY POLICY (GDPR)
1. Introduction and Data Controller
This Privacy Policy describes how the NtE (Nessus To Excel) software and its associated website (nte-app.com) collect and process data.
The data controller is Savinien GODINEAU (Sole Proprietorship / EI currently being registered), publisher of the NtE software.
Contact: support@nte-app.com
2. Security Architecture and Privacy "By Design" (The NtE Software)
The core of the NtE application is designed to ensure total confidentiality of audit data:
100% Local Processing: The parsing and extraction of Nessus scan files (.nessus, .csv) are performed exclusively locally on the user's machine.
No Audit Data Leakage: At no time are the contents of your Nessus files, detected vulnerabilities, or information about your targets transmitted to our servers or any third parties.
Zero Telemetry: The software does not include any usage tracking system (analytics) or automated crash reporting (crash reporter).
3. Data Collected by the Software (License Verification)
To prevent piracy and limit the use of a license to a single machine, the NtE software makes outbound network requests only in two specific cases:
Update Verification: A simple HTTP GET request is sent to check for the latest available version (no payload is sent).
License Activation and Validation: The software sends an HTTP POST request to our license server. The payload strictly contains:
The entered license key (licenseKey).
A unique hardware identifier (hardwareId), generated from the computer's motherboard UUID (via the WMI class Win32_ComputerSystemProduct).
Standard Access Logs: As with any HTTP request, the user's public IP address is visible to our license server at the time of connection.
Legal Basis (GDPR): Performance of a contract (provision and securing of the software license).
4. Hosting and Data Transfer
Data related to license management (license keys, associated hardwareIds) are processed and stored on Google Cloud Platform (GCP) servers.
Strict European Union Localization: The cloud function servers (Cloud Functions) are physically located in the europe-west1 region (Belgium).
No transfer of this data is made outside the European Union.
5. Data Collected on the Website (nte-app.com)
Hosting and Basic Analytics: The site is hosted by Hostinger, which collects standard access logs (server logs including IP addresses) for security and maintenance purposes. We also use Google Search Console to analyze the site's search performance, which does not involve placing any tracking cookies on the user's browser.
Payment Process (LemonSqueezy): During purchase, the user is redirected to a secure checkout page hosted by our Merchant of Record, LemonSqueezy. LemonSqueezy collects billing information, bank details, and places its own cookies. The publisher of NtE never has access to credit card numbers. We only receive the buyer's email address and the transaction status from LemonSqueezy to proceed with sending the license key.
For more details on the processing of payment data, please consult LemonSqueezy's privacy policy.
6. Your Rights (GDPR)
In accordance with the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, and object to the processing of your personal data (purchase email address, license logs).
Technical Note on Erasure: Requesting the deletion of your hardware identifier (hardwareId) or your email address will result in the immediate and irreversible revocation of your license key, preventing further use of the NtE software.
To exercise your rights, please contact: support@nte-app.com.