Privacy Policy & GDPR

1. Data controller

The controller of personal data collected via iauai.fr is:

IAuAI
Registered office: 3 route de Riom, 63530 Volvic – France
Email: contact@iauai.fr

2. Data collected

2.1 Browsing data (with consent)

If you accept analytics cookies, we collect anonymised browsing data: pages visited, session duration, traffic source, device type. This data does not allow personal identification.

2.2 Contact forms and email

When you contact us by email or through a form, we collect: first name, last name, professional email address, company name, and the content of your message.

2.3 AI Quiz

AI Quiz responses are processed locally in your browser (JavaScript). They are not transmitted or stored on our servers, unless you explicitly choose to share your results.

2.4 Client data (in the context of a project)

As part of our services, we may process data from your company (business, HR, financial data). These processing activities are governed by a dedicated data processing agreement, in accordance with Article 28 of the GDPR.

3. Purposes and legal bases of processing

Purpose	Legal basis	Data concerned
Responding to contact requests	Legitimate interest / Contract	Name, email, message
Managing the commercial relationship	Contract / Legal obligation	Contact details, quotes, contracts
Audience measurement (analytics)	Consent	Anonymised browsing data
Improving the site and AI quiz	Consent / Legitimate interest	Browsing behaviour
Invoicing and accounting obligations	Legal obligation	Billing data

4. Confidentiality agreement (NDA) — Our commitment from day one

🔐 Confidentiality from the start of every project

IAuAI places fundamental importance on protecting its clients' sensitive information. That is why IAuAI systematically proposes the signing of a non-disclosure agreement (NDA) at the start of every commercial relationship, including during the exploratory phase before any contract is signed.

This NDA covers in particular:

Business, financial and strategic data shared during exchanges
Information on your company's internal processes and organisation
Client and supplier data you may communicate to us
Any document, prototype or information designated as confidential by your company

The NDA is bilateral: it protects your information vis-à-vis IAuAI, and also protects IAuAI's proprietary methods and tools vis-à-vis your organisation.

To request an NDA before a first meeting, contact us at: contact@iauai.fr

5. Cookies and trackers

        Your consent is required. Analytics cookies are only placed after your explicit agreement via the consent banner. You can change your choice at any time by clicking "Manage cookies" at the bottom of the page.
      

5.1 Strictly necessary cookies

These cookies are essential for the website to function and do not require your consent.

Cookie	Purpose	Duration	Type
`iauai_cookie_consent_v1`	Stores your cookie consent choice	1 year	Necessary

5.2 Analytics cookies (subject to consent)

Activated only if you have accepted analytics cookies:

Tool	Publisher	Purpose	Duration	Type
Microsoft Clarity	Microsoft Corporation	Session recording, heat maps, anonymised behavioural analysis	1 year	Analytics
Google Analytics 4	Google LLC	Audience measurement, traffic source, pages visited — anonymised IP	2 years	Analytics

5.3 Transfers outside the EU

Microsoft Clarity and Google Analytics 4 may transfer data to the United States. These transfers are governed by the Standard Contractual Clauses (SCCs) approved by the European Commission and the EU-US Data Privacy Framework.

For more information: Microsoft Privacy Statement · Google Privacy Policy

6. Data recipients

Your data may be shared with:

IAuAI team members involved in your project, strictly on a need-to-know basis
Our technical sub-processors (hosting provider, analytics tools) — only within the scope of their mission and under a GDPR data processing agreement
Competent authorities where required by a legal obligation

IAuAI never sells your personal data to any third party.

7. Retention periods

Data type	Retention period
Contact requests and prospects	3 years from the last contact
Client data (contracts, quotes)	10 years (accounting obligation)
Billing data	10 years (Commercial Code)
Browsing data (analytics)	13 months maximum (CNIL)
Connection logs	12 months (legal obligation)

8. Your rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access: obtain a copy of the data we hold about you
Right of rectification: correct inaccurate or incomplete data
Right to erasure: request deletion of your data ("right to be forgotten")
Right to restriction of processing: request suspension of processing of your data
Right to data portability: receive your data in a structured, machine-readable format
Right to object: object to processing of your data for direct marketing or legitimate interest purposes
Right to withdraw consent at any time for processing based on your consent (analytics cookies)

To exercise these rights, contact us at: contact@iauai.fr
We will respond within a maximum of one month from receipt of your request.

9. Data security

IAuAI implements appropriate technical and organisational measures to protect your data against destruction, loss, alteration, unauthorised disclosure or unauthorised access.

These measures include: encrypted communications (HTTPS/TLS), restricted data access based on the principle of least privilege, access rights management, and ongoing security awareness training for the team.

IAuAI operates in line with its data sovereignty promise: our clients retain control of their business data, and we do not store it on uncontrolled infrastructure.

10. Contact & complaints

For any questions regarding this policy or to exercise your rights, contact us:

IAuAI
Email: contact@iauai.fr
Subject: [GDPR Request]

If you believe your rights have not been respected, you may lodge a complaint with the relevant supervisory authority. In France: Commission Nationale de l'Informatique et des Libertés (CNIL):

CNIL — 3 Place de Fontenoy · TSA 80715 · 75334 Paris Cedex 07
www.cnil.fr

Privacy Policy

Table of contents