Privacy Policy 

Nous Sage is a product strategy, design and engineering studio based in Dhaka, Bangladesh, working with SaaS and Fintech teams worldwide. In this policy, “Nous Sage”, “we” and “us” mean the studio, and “you” means anyone who visits our website, contacts us or works with us.

For any privacy question or request, email [email protected].

We only collect what we need to reply to you and do the work you ask for.

• Project enquiry form: your name, work email, company or product name, website (optional), business type, current stage, services needed, your main challenge, and optional budget range, timing and project details.
• Free Product Check form: your name, work email, company or product name, website (optional), business type, stage, the review option you choose, your main challenge and optional timing.
• Emails, calls and messages: whatever you choose to share when you email us, book a call or message us on WhatsApp.
• Basic technical data: like most websites, our hosting provider automatically processes standard request data (such as IP address, browser type and pages requested) to deliver the site securely and protect it from abuse.

Please don’t send passwords, payment card details, customer financial records, KYC documents or other sensitive personal data through our forms or email. If a project needs access to sensitive systems or data, we agree a secure method in writing first.

• To reply to your enquiry or Product Check application, and to send you an automatic confirmation that we received it.
• To assess fit, prepare proposals, scopes and estimates.
• To deliver the services you engage us for, including updates, reviews and handover.
• To keep business records such as proposals, agreements and invoices.
• To keep our website and communications secure and prevent spam or misuse.

We do not sell your personal information, and we don’t use it for advertising. We won’t add you to a marketing newsletter without your clear permission.

Where data protection laws such as the UK GDPR or EU GDPR apply, we rely on: taking steps at your request before entering into a contract, and performing that contract (enquiries, proposals and projects); our legitimate interests in running and securing our business and replying to messages; your consent where we ask for it (you can withdraw it at any time); and legal obligations, such as keeping financial records.

We use a small number of trusted providers to run the website and our communication. They only process data to provide their service to us.

• Cloudflare: website hosting, security and content delivery.
• Resend: delivering form notification and confirmation emails.
• Google (Gmail and Google Meet): our email inbox and video calls.
• Cal.com: booking calls through our scheduling link.
• WhatsApp (Meta): if you choose to message us there.

For client projects we may also use design, development and project tools (for example Figma, GitHub and our hosting platforms). We’ll tell you which tools a project uses.

Nous Sage works from Bangladesh with clients in the US, UK, Europe and elsewhere, and our providers may process data in other countries, including the United States. When we transfer personal data internationally, we rely on providers’ standard safeguards, such as Standard Contractual Clauses where applicable.

• Enquiries and Product Check applications that don’t lead to a project: up to 24 months, so we have context if you contact us again. You can ask us to delete them sooner.
• Client project records, proposals and invoices: for as long as needed to deliver the work and meet legal, tax and accounting requirements.

When information is no longer needed, we delete it or anonymise it.

We limit access to the people who need it, use reputable providers with encrypted connections (HTTPS), and use strong account security on the tools we work with. No online service can be guaranteed 100% secure, so please contact us right away if you think information you shared with us is at risk.

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, receive a copy of it, and withdraw consent.

To make a request, email [email protected]. We’ll verify the request and respond within the time required by applicable law. You also have the right to complain to your local data protection authority.

noussage.com doesn’t use advertising cookies or third-party tracking pixels. Our hosting provider may set strictly necessary cookies to keep the site secure and working. If we add analytics or any non-essential cookies in the future, we’ll update this policy and ask for consent where the law requires it.

Our website and services are for businesses and are not directed at children under 16. We don’t knowingly collect personal information from children. If you believe a child has sent us information, contact us and we’ll delete it.

We may update this policy as our services or the law change. The effective date at the top shows the latest version, and significant changes will be highlighted on this page.

Questions or requests: [email protected].