How Nalloo handles data: at company level, with no personal data of visitors, and everything hosted in the European Union.
Last updated: 30 June 2026
Who we are
Ecofin Cloud S.L. ("Nalloo", "we"), the company behind the Nalloo product (NIF B66585605, registered office at Av. Cerdanyola 92-94, 08173 Sant Cugat del Vallès, Barcelona, Spain), is the controller of the data described in this notice. For any privacy or data-protection matter, contact us at support@nalloo.com.
This notice explains what data we process, for what purpose and legal basis, for how long, who we share it with, and your rights. It is informational and not legal advice.
The principle
Nalloo identifies the company behind a visit to a B2B website — never the individual person. We do not process names, personal emails or individual profiles of visitors.
The visitor's IP address is processed hashed (never stored in clear) and used only to resolve the organisation from network signals (ASN, corporate DNS). For this identification, Nalloo processes IP addresses hashed and stores no personal data.
What data
About identified companies: company name, domain, industry, approximate size, HQ, founded year and technology signals, all from public sources; plus the pages viewed as an intent signal. This does not include personal data.
About our customers (account holders): sign-up and contact details (e.g. a work email), billing data and dashboard usage data needed to provide the service.
Technical data: the visitor's IP processed hashed and network metadata used to resolve the company.
Why
Cookies
Nalloo's identification product (the script you install on your site) uses cookies (strictly necessary, functional and analytics).
We also use analytics cookies (for example, Google Analytics) to measure site usage. You can manage these from your browser settings; where your jurisdiction requires it, a consent banner will be shown.
Where
Data is hosted and processed within the European Union (Frankfurt and Madrid). We do not transfer data outside the EEA to provide the service unless strictly necessary and with the safeguards required by the GDPR.
With whom
We share data only with providers acting under a data-processing agreement: EU hosting, web analytics and payment processing providers. They process data solely under our instructions.
We do not sell personal data and do not share it with third parties for advertising.
How long
We keep account data for as long as the relationship is active and, afterwards, for the applicable legal periods (e.g. tax obligations). Company-identification data is retained according to your account settings and deleted when the account is closed.
Your rights
Because Nalloo processes no personal data of identified visitors (companies only), individual rights are exercised mainly by our customers regarding their own account data.
To exercise any right, write to support@nalloo.com. We will respond within the legal time limits.
Security
We apply appropriate technical and organisational measures: encryption in transit and at rest, hashed IP processing, access control and activity logging. No system is infallible, but we work to protect information proportionately to the risk.
Companies
If you represent an organisation and do not want your company to appear identified in the service, contact us at support@nalloo.com and we will handle your request.
Changes
We may update this notice to reflect legal or service changes. The current version will be published on this page with its update date.
Contact
For any privacy or data-protection matter: support@nalloo.com.