Privacy Policy
Last updated: 26 October 2026
This policy explains what personal data AI Verse collects through ai-verse.com and in its business relationships, why we collect it, how long we keep it and how you can exercise your rights. It applies the General Data Protection Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of 6 January 1978 as amended.
1. Who is responsible for your data
The data controller is AI VERSE, a French simplified joint-stock company (SAS) with a share capital of EUR 247,879.40, registered under SIREN 879 981 983, whose registered office is at Garden Space, Bâtiment A, 240 rue Évariste Galois, 06410 Biot, France.
For any question about your personal data, write to [contact@ai-verse.com] with “Personal data” in the subject line, or by post to the address above, for the attention of the data protection contact.
2. What we collect, why, and on what legal basis
We only collect data that you give us or that is needed to run the site. We do not buy contact lists, we do not sell personal data, and we do not use it for advertising profiling.
Processing | Data | Purpose | Legal basis (GDPR art. 6) |
Demo requests and contact forms | Work email, organisation type, subject, your message and the needs you describe (target classes, sensors) | Answering your request, preparing and running a demonstration, following up | Steps taken at your request before a contract (6.1.b); our legitimate interest in answering enquiries (6.1.f) |
Document downloads | Work email, the document requested | Sending the document, and contacting you about it | Steps taken at your request (6.1.b) |
Business relationship and prospecting | Name, work email, organisation, role, history of exchanges | Managing our relationship with customers and prospects, sending information on products related to your professional activity | Our legitimate interest in developing our business with professionals (6.1.f). You can object at any time, including from any email we send. |
Contracts, orders and invoicing | Identity and contact details of your organisation’s representatives, contract and billing data | Performing contracts, invoicing, accounting, export control compliance | Contract (6.1.b); legal obligations (6.1.c) |
Job applications | CV, cover letter, contact details, information you choose to share, interview notes | Assessing applications and recruiting | Steps taken at your request before a contract (6.1.b); our legitimate interest in recruiting (6.1.f) |
Audience measurement | Pages viewed, approximate location derived from a truncated IP address, device and browser type, through Google Analytics loaded by Google Tag Manager | Measuring how the site is used, in aggregate, to improve it | Your consent (6.1.a), given or refused in the cookie banner |
Campaign attribution | HubSpot tracking cookie linking visits to a form you submit | Understanding which content led to a demo request | Your consent (6.1.a) |
Hosting and security | IP address, date and time, page requested, browser, technical logs | Operating the site, preventing and investigating abuse and attacks | Our legitimate interest in securing the site (6.1.f); legal obligations of hosting providers (6.1.c) |
Exercise of your rights | The content of your request and our answer | Handling your request and proving that we did | Legal obligation (6.1.c) |
Fields marked as required in our forms are needed to answer you. Without them we cannot process the request.
3. How long we keep your data
We keep personal data only as long as needed for the purpose for which it was collected. The periods below are the maximum periods set by French law or recommended by the CNIL, the French data protection authority. When a period ends, the data is deleted or anonymised.
Data | Maximum retention | Reference |
Prospects: contact forms, demo requests, document downloads, prospecting | 3 years from the last contact initiated by you (a reply, a form, a meeting) | CNIL reference framework on commercial management |
Customers: relationship management | Duration of the contract, then 3 years from its end for prospecting purposes | CNIL reference framework on commercial management |
Contracts and evidence of the relationship | 5 years from the end of the contract, in restricted-access archives | French Civil Code, art. 2224 (limitation period) |
Accounting records and invoices | 10 years from the end of the financial year | French Commercial Code, art. L.123-22 |
Job applications not followed by a hire | 2 years from the last contact with you, unless you ask us to delete them sooner | CNIL reference framework on recruitment |
Analytics and marketing cookies | 13 months from when they are set | CNIL guidelines on cookies |
Audience measurement data | 25 months | CNIL guidelines on cookies |
Record of your cookie choice | 6 months, after which we ask again | CNIL guidelines on cookies |
Technical and security logs | 12 months | Decree no. 2021-1362 of 20 October 2021; CNIL recommendation on logging |
Objection to prospecting | 3 years from your objection, to make sure we respect it | CNIL reference framework on commercial management |
Requests to exercise your rights | The time needed to answer, then 5 years as evidence. Any proof of identity is deleted once checked. | French Civil Code, art. 2224 |
4. Who receives your data
Your data is accessed only by the AI Verse staff who need it: the commercial team, management and, for applications, the people involved in recruitment. It is also processed on our behalf by the following service providers, under contracts that meet GDPR article 28:
HubSpot, for forms and customer relationship management.
Google, for Google Tag Manager and Google Analytics, only if you accept audience measurement.
Scaleway, for hosting the site in France.
Our applicant tracking system, for job applications.
We may also disclose data to public authorities when the law requires it, and to our legal and accounting advisers, who are bound by professional secrecy. We do not sell or rent personal data.
5. Transfers outside the European Union
Hosting is in France. Some providers, such as HubSpot and Google, belong to groups based in the United States and may access or store data there. These transfers rely on the European Commission adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, for companies certified under it, and otherwise on the European Commission’s Standard Contractual Clauses with additional safeguards where needed. You can ask us for a copy of these safeguards.
6. How we protect your data
We apply technical and organisational measures suited to the risks: hosting in France, encrypted connections (HTTPS), access restricted to the people who need it, and providers selected for their security commitments. If a breach occurs that is likely to put your rights at risk, we notify the CNIL within 72 hours and inform you when the law requires it.
7. Your rights
Under the GDPR and the French Data Protection Act, you have the right to:
access your data and receive a copy;
rectify inaccurate or incomplete data;
erase your data, within the limits of our legal obligations;
restrict processing in the cases set out in the law;
object to processing based on our legitimate interest and, at any time and without giving a reason, to prospecting;
port the data you gave us, in a structured and machine-readable format, when processing is based on consent or a contract;
withdraw your consent at any time, for example from the cookie preferences, without affecting processing carried out before;
give instructions on what happens to your data after your death, as provided by article 85 of the French Data Protection Act.
To exercise these rights, write to [contact@ai-verse.com] or to our postal address. We answer within one month. This period can be extended by two months for complex or numerous requests, in which case we tell you why. We only ask for proof of identity when there is reasonable doubt about who is making the request.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
8. Cookies
Strictly necessary cookies are always active. Audience measurement and marketing cookies are set only if you accept them, and refusing is as easy as accepting. The cookie policy lists them, and you can change your choice at any time from the “Cookie preferences” link at the bottom of every page.
9. Children
This site is intended for professionals. It is not directed at children under 15, and we do not knowingly collect their data.
10. Complaints
If you believe your rights are not respected, you can contact us first. You can also lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr.
11. Changes to this policy
We may update this policy to reflect changes in our processing or in the law. The date at the top of the page shows the latest version. Significant changes will be announced on the site.