Privacy Policy

1. Data Controller

MOSSABELY Radnoumane, 3 rue Jean Monnet, 92700 Colombes. Contact: privacy@euaiindex.com.

2. Data Collected and Purposes

Diagnostic (company name, email, sector, headcount, revenue, entered tools): regulatory-exposure assessment — legal basis: pre-contractual measures.

Email and account: client-area access and report delivery — legal basis: contract performance.

Abandoned-diagnostic follow-up: legal basis: legitimate interest.

3. Retention

Draft diagnostics: 12 months. Client accounts: 3 years after last contact. Billing data: applicable legal period.

4. Sub-processors

Stripe — Traitement des paiements — UE / USA (DPF).

Cloudflare — DNS, proxy CDN, email transactionnel — USA (DPF).

Ollama Cloud — Inférence IA (données d'outils, pas de données personnelles clients) — USA.

OVH — Hébergement du serveur applicatif — UE (France).

5. Your Rights

You have rights of access, rectification, erasure, portability and objection. Exercise them at privacy@euaiindex.com. You may lodge a complaint with the CNIL.

Informational document — legal review is recommended.