Data controller
This policy describes how Novalyse SASU ("Novalyse", "we") collects and processes your personal data when you use the website novalyse.io (the "Site").
Novalyse SASU, a French company with share capital of 500€, rue du bas Huet, 78100 Saint Germain En Laye — SIRET 990 612 129 00025, registered at VERSAILLES, intra-community VAT number FR63990612129.
For any question about the processing of your personal data, write to contact@novalyse.io.
Data collected and purpose of processing
When you use the Site's contact form, we collect: your name, your professional email address, your company name (optional field) and the message you send us.
This data is processed for a single purpose: answering your request. It is neither used for marketing purposes without prior notice nor transferred to third parties.
The processing relies on your consent, collected at submission time through an unchecked checkbox that you must accept before the form is sent.
Retention period
Data from the contact form is kept for a maximum of 24 months from our last exchange with you, then deleted.
For an ongoing or completed engagement, data necessary to perform and track the contract (quote, deliverables, invoicing) is kept for as long as applicable legal obligations require, notably limitation periods.
Your rights
Under the General Data Protection Regulation (GDPR) and the French Informatique et Libertés Act, you have the right of access, rectification, erasure, portability and objection to your personal data.
To exercise any of these rights, simply write to contact@novalyse.io specifying the nature of your request. We strive to respond within one month at most.
You may also lodge a complaint with the French data protection authority (CNIL).
Sub-processors
Site hosting: the Site is hosted on Vercel or Netlify depending on the production setup; technical logs may include your IP address and, where applicable, be transferred outside the European Union under standard contractual clauses.
Audience measurement: Plausible works without cookies by default. We prefer an instance hosted within the European Union; where Plausible's cloud is used, a data processing agreement (DPA) is signed and any transfers outside the EU rely on appropriate safeguards.
Scheduling: Calendly is only used if the booking option is enabled. In the current version of the Site it is a simple outbound link to a Calendly page, with no embedded iframe; data submitted on that page is then governed by Calendly's own terms.
Cookies and trackers
The Site displays a consent banner and may load an audience measurement tool after your acceptance. For the full detail of what is stored in your browser (nature, purpose, duration), see our cookie policy, available from the Site footer.