Privacy & Cookie Policy

Introduction

At Nirvana Diamond, we are committed to protecting your privacy and ensuring a safe online experience. Nirvana Diamond is a vision-stage, human-centric experience service founded by Soheill Deriss in Stockholm, Sweden. It is part of the Deriss ecosystem (deriss.com) and will run on Experience OS (xp.deriss.com), a privacy-native coordination engine. This Privacy & Cookie Policy explains how we collect, use, and safeguard your information, in line with the EU General Data Protection Regulation (GDPR) and the EU AI Act.

Who is responsible for your data

Personal data collected through nirvanadiamond.com is handled under the responsibility of founder Soheill Deriss, Stockholm, Sweden. Contact: soheill@deriss.com.

Privacy-native, governance by design

We follow the Governance-by-Design principles published by Social Capital Stockholm (SC_S), the system innovation studio behind Europe's Experience Layer. In practice this means:

• You are the principal: any system acting for you does so only on a mandate you gave, and you can withdraw it at any time.
• See everything we learn: no hidden profiles. You can view, edit, export or delete your data in one step.
• Patterns, not transcripts: when Experience OS features are used, we keep the patterns that help us be useful, never your actual words.
• Auditability: automated decisions leave a record that you, and where relevant an oversight body, can read.
• No surveillance capitalism: we never sell your data or use it for third-party advertising.

Information We Collect

Personal Information: We may collect personal information such as your name, email address, and contact details when you join the waitlist, register for our services, subscribe to our newsletter, or contact us directly.

Non-Personal Information: We also collect technical information such as browser type, device, IP address, and pages visited to improve user experience and analyse website traffic. Where this can identify you (for example an IP address), we treat it as personal data.

Powered by Experience OS: Nirvana Diamond runs on Experience OS, built in Sweden on European values. See everything we hold. Delete anytime. Take your data. Read more at xp.deriss.com/trust.

• ✓GDPR built-in
• ✓EU AI Act ready

Invite links: When you join through someone's invite link we record who invited you. We use this to move the inviter up the access list and to group friends so you can be invited together. We never show other members' details to you.

Phone number (optional): When requesting access you may add a phone number for your invite and concierge requests. The separate, initially unticked checkbox lets you consent to automated texts from Nirvana Diamond about your invite and launch updates (legal basis: consent, GDPR Art. 6(1)(a)). We store your number and a consent timestamp if you opt in. Entering a number or accepting our terms alone does not give consent, and leaving the box unticked does not affect your access request. Without that opt-in, we do not send automated or marketing texts; any personal follow-up must relate to your specific request and have an appropriate legal basis. You can withdraw consent by emailing us or, once texting is available, replying STOP. We delete your number when you leave the access list or ask us to remove it. If we use an SMS provider, it acts as our processor; we prefer EU-based providers and use appropriate safeguards for any international transfers.

How We Use Your Information

We use your personal information to provide and enhance our services, communicate with you about launch news, updates or offers, and improve the overall user experience. Technical information is used for website analytics and to optimise our services. You can unsubscribe from emails at any time.

How We Share Your Information

We may share your information within the Deriss ecosystem (deriss.com, xp.deriss.com) when needed to deliver a service you have asked for, and with trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you, under data processing agreements. We do not sell or trade your personal information to outside parties. If data is transferred outside the EU/EEA, we use appropriate safeguards such as the EU Standard Contractual Clauses.

Cookies and Tracking Technologies

Use of Cookies: Cookies are small text files placed on your device to help us improve your experience on our site. We use cookies to remember your preferences and analyse site traffic.

Types of Cookies: Essential cookies for website functionality are always on. Performance (analytics) cookies and any marketing cookies are only used with your consent.

Managing Cookies: You can withdraw consent or disable cookies through your browser settings at any time. Disabling essential cookies may affect the functionality of our site.

Data Retention

We keep personal data only as long as needed for the purpose it was collected — for example, waitlist emails until launch or until you unsubscribe — and then delete or anonymise it.

Data Security

We implement a variety of security measures to protect your personal information from unauthorised access, disclosure, or destruction. These include encryption, secure servers, and regular security reviews.

Your Rights

You have the right to access, correct, or delete your personal information, to receive a copy of it (data portability), to object to processing, or to ask us to restrict its use. To exercise these rights, contact us at soheill@deriss.com. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

Legal Basis for Processing Data

We process your personal data based on your consent, our legitimate interests in providing and improving our services, the performance of a contract with you, and compliance with legal obligations.

Changes to This Policy

We may update this Privacy & Cookie Policy from time to time. We will notify you of any significant changes by posting the updated policy on our website with the date of the last revision.

Contact Information

If you have any questions or concerns about this Privacy & Cookie Policy, please contact us at soheill@deriss.com.