Privacy policy

Controller

The data described below is processed by INTUISPHERE, whose contact details appear in the Legal notice.

For any question about your data, write to contact@intuisphere.com.

This policy covers the data of our customers and of people who send us a report. The data you collect yourself through your website falls under the processing annex, where you are the controller and we are your processor.

Data processed and purposes

We collect only what is necessary for the service to work.

• Account: email address, password hash, display language and, if you turn it on, two-step verification details. Necessary for the performance of the contract.
• Billing: name or company name, address, country, VAT number where applicable, invoice history. Necessary for the performance of the contract and for our accounting obligations.
• Payment: card details are entered directly with our payment provider and do not pass through our servers. We keep only the card brand, the last four digits and the expiration date.
• Service usage: websites created, pages, media, storage volumes, AI and translation credit consumption. Necessary for the performance of the contract and for compliance with quotas.
• Technical data: login session, access logs, anti-abuse counters. Based on our legitimate interest in keeping the service secure.
• Proof of acceptance of the terms: date, version accepted, IP address and browser at the time of acceptance. Necessary to establish the contract and to defend our rights.
• Support exchanges: the content of the requests sent to our support team. Based on our legitimate interest in getting back to you.
• Reports of illegal content: name, email address and content of the report of the person sending it. Necessary for compliance with our obligations as a host (Regulation (EU) 2022/2065, Article 16). Their identity is not disclosed to the customer concerned, unless required by law.

AI assistant

When you use the AI assistant, the text of your request and the elements of the page concerned are sent to our artificial intelligence providers in order to produce a response.

These exchanges are not used to train models. We keep only consumption counters, without the content of the requests.

Retention periods

• Account data and website content: as long as your Account exists, then six months after the end of the trial or the subscription without renewal; the Account is then deleted, after two email reminders. An Account suspended by the Publisher is kept until the Publisher's decision.
• Encrypted database backups: 35 days for weekly backups, 400 days for monthly backups, restored only in the event of an incident.
• Deleted media files: 90 days in the trash, then destruction.
• Invoices and accounting records: ten years, in accordance with legal obligations.
• Technical logs: as long as necessary for the security of the service.
• Anti-abuse counters: two days at most, as a non-reversible hash of the IP address.
• AI and translation consumption counters: as long as necessary to track billing, then in aggregated form.
• Reports: the identity of the person making the report is erased one year after our decision; the report and the decision are kept without it for five years, to document how they were handled.

Recipients and processors

We do not sell or rent your data. It is accessible to our team and to the providers strictly necessary for the service to work, in the following categories.

Hosting and database

European Union (Germany)

Website delivery, file storage and bot protection

Global network, with each request handled at the point of presence closest to the visitor

Payment collection

European Union and United States

Sending emails and form messages

United States

Artificial intelligence assistance and translation

United States

Invoice generation and archiving

European Union

Address geocoding and directions maps

France

Some of these providers are established outside the European Union. The corresponding transfers are governed by the European Commission's standard contractual clauses.

The protection of our forms and public pages against automated sign-ups and submissions relies on the Turnstile service provided by our delivery provider. It analyzes technical signals from your browser, including your IP address and the characteristics of your connection, to tell a person from a program, without seeking to identify you or to track your browsing from one website to another. The corresponding processing is described in the privacy addendum published by that provider, at https://www.cloudflare.com/turnstile-privacy-policy/.

The list of these providers by name is kept up to date and made available to our customers from their account, as well as to anyone who requests it at contact@intuisphere.com. Any new provider handling your data is reported to our customers before it goes into service.

Cookies

We do not use advertising cookies and we do not carry out tracking for commercial audience measurement purposes.

• One session cookie, needed to keep you logged in.
• Two preference cookies, which store your display language and the currency in which prices are displayed.
• One temporary login cookie, for the duration of two-step verification when you have turned it on.

These cookies are strictly necessary for the service or for its security, so they do not require your prior consent.

Your rights

You have a right of access, rectification, erasure, restriction, objection and portability over your data.

You can exercise some of these rights directly from your Account. You can correct your information and, during your subscription, export your websites.

For other requests, including deletion of your account, write to contact@intuisphere.com. We reply within one month.

If you believe your rights are not being respected, you may file a complaint with the Commission nationale de l'informatique et des libertés (French data protection authority).

Security

Exchanges with the platform are encrypted. Passwords are stored as hashes and are never readable, including by us.

Access to production data is restricted to the people who need it to operate the service.

In the event of a data breach likely to create a risk to your rights, we will inform you as soon as possible.