Privacy Policy

Data Controller

The data described below is processed by INTUISPHERE, whose contact information is provided in the legal notice.

If you have any questions regarding your data, please contact contact@intuisphere.com.

This policy applies to our customers’ data. The data you collect yourself through your website is covered by the data processing agreement, under which you are the data controller and we are your data processor.

Data Processed and Purposes

We collect only what is necessary for the service to function.

• Account: email address, encrypted password, display language. Necessary for the performance of the contract.
• Billing: name or business name, address, country, VAT number (if applicable), billing history. Necessary for the performance of the contract and to meet our accounting obligations.
• Payment: Bank details are entered directly with our payment service provider and do not pass through our servers. We retain only the card brand, the last four digits, and the expiration date.
• Service usage: sites created, pages, media, storage volumes, AI and translation credit usage. Necessary for the performance of the contract and to ensure compliance with quotas.
• Technical data: login sessions, access logs, anti-abuse counters. Based on our legitimate interest in securing the service.
• Proof of acceptance of the terms and conditions: date, accepted version, IP address, and browser at the time of acceptance. Necessary for establishing the contract and defending our rights.
• Communications with support: the content of requests sent to our support team. Based on our legitimate interest in responding to you.

AI Support

When you use AI support, the text of your request and elements from the relevant page are sent to our artificial intelligence provider to generate a response.

These interactions are not used to train models. We retain only usage metrics, without the content of the requests.

Retention Periods

• Account data and website content: for the duration of the contract, then for thirty days after its termination.
• Invoices and accounting documents: ten years, in accordance with legal requirements.
• Technical logs and anti-abuse counters: up to twelve months.
• AI and translation usage metrics: for the time necessary to monitor billing, then in aggregated form.

Recipients and Processors

We do not sell or rent your data. It is accessible to our team and to service providers strictly necessary for the operation of the service, which fall into the following categories.

Hosting and database

European Union (Germany)

Website hosting, file storage, and anti-bot protection

Global network, entry into the European Union

Payment processing

European Union and United States

Sending emails and form submissions

United States

AI-powered assistance and translation

United States

Invoice Issuance and Archiving

European Union

Some of these service providers are based outside the European Union. The corresponding data transfers are governed by the European Commission’s standard contractual clauses.

The list of these service providers is kept up to date and made available to our customers through their accounts, as well as to anyone who requests it from contact@intuisphere.com. Any new service provider handling your data is notified to our customers before it begins operations.

Cookies

We do not use advertising cookies and do not track users for the purpose of measuring commercial audience metrics.

• A session cookie, which is necessary to keep you logged in.
• A preference cookie, which remembers your language and display theme.
• An anti-bot cookie on public forms, designed to prevent automated submissions.

These cookies are strictly necessary for the service or its security: they do not require your prior consent.

Your Rights

You have the right to access, correct, delete, restrict, object to, and transfer your data.

You can exercise some of these rights directly from your Account: correct your information, export your sites, or delete your account.

For other requests, please write to contact@intuisphere.com. We will respond within one month.

If you believe your rights have not been respected, you may file a complaint with the French Data Protection Authority (CNIL).

Security

Communications with the platform are encrypted. Passwords are stored as hashes and are never readable, not even by us.

Access to production data is restricted to those who need it to operate the service.

In the event of a data breach that could pose a risk to your rights, we will notify you as soon as possible.