Privacy Policy

1. Data Controller

MOSSABELY Radnoumane, 3 rue Jean Monnet, 92700 Colombes. Contact: privacy@euaiindex.com.

2. Data Collected and Purposes

Diagnostic (company name, email, sector, headcount, revenue, entered tools): regulatory-exposure assessment — legal basis: pre-contractual measures.

Email and account data: client-area access and report delivery — legal basis: contract performance.

Purchase data (email, amount, order reference): transmitted to Stripe at payment — legal basis: contract performance.

Abandoned-diagnostic follow-up: legal basis: legitimate interest.

Audience measurement (self-hosted Plausible Analytics, cookie-free, aggregated and anonymised data, no personal data): legal basis: legitimate interest.

3. Retention

Draft diagnostics: 12 months. Magic-link authentication tokens: 15 minutes. "diag_token" cookie: 30 days. Client-area session cookie: 7 days. Client accounts and order history: 3 years after last active contact. Billing data: applicable legal period (10 years for accounting purposes).

4. Sub-processors

Stripe — Traitement des paiements — UE / USA (DPF).

Cloudflare — DNS, proxy CDN, email transactionnel — USA (DPF).

Ollama Cloud — Inférence IA (données d'outils, pas de données personnelles clients) — USA.

OVH — Hébergement du serveur applicatif — UE (France).

5. Your Rights

You have rights of access, rectification, erasure, portability and objection. Exercise them at privacy@euaiindex.com. You may lodge a complaint with the CNIL.