Privacy policy

We collect only what you give us and what the site needs in order to work. Information sent through our forms is used solely to handle your request: it is never sold or passed to third parties for commercial purposes.

• Contact and project forms. Identity (first name, last name, job title), contact details (email, phone), company (name, sector, country, city, headcount, revenue band), need, timeframe, indicative budget, role in the decision and free-text message. We also record the page of origin, any campaign parameters (UTM) and your IP address at the time of submission.
• Virtual assistant. Your messages and the replies, the language, the page the conversation was opened from, the topics discussed and a random identifier. If you leave your contact details, they are added to your request.
• Newsletter. Email address, first name if you give it, language, sign-up source and proof of your consent (confirmation date and IP address).
• Member area. Display name, email address, language, sign-in method. With a password, we keep only a hash of it; with a Google, Facebook or LinkedIn account, we receive the identifier, name, email address and profile picture that service passes on. We also keep the IP address and browser of your sign-ins, your comments and ratings and, only if you turn it on, your page history.
• Trackers and consent. Your cookie choice and, once you agree, the audience-measurement and advertising data described below. An internal, cookie-free, anonymous measurement counts the step at which visitors abandon forms.
• Technical logs. IP address, date and pages requested, kept for security and diagnostics.

We do not seek to collect any sensitive data (health, opinions, bank details): please do not include any in your messages. The required form fields are needed to handle your request; without them, we cannot answer it.

For each use: why we use your data, on what basis, and how long we keep it. After that period, it is deleted or made anonymous.

• Contact or quote request

  Data involved

  Identity, contact details, company, need, message

  Legal basis

  Your consent (ticked box) and pre-contractual steps taken at your request

  Retention period

  3 years after the last contact

• Virtual assistant

  Data involved

  Messages, replies, language, page of origin, topics discussed, random identifier

  Legal basis

  Your consent, requested before the first conversation

  Retention period

  12 months after the last message

• Call-back requested in the assistant

  Data involved

  Name, and optionally email, phone and company, need, conversation excerpt

  Legal basis

  Your consent (ticked box)

  Retention period

  3 years after the last contact

• Newsletter

  Data involved

  Email, optional first name, language, proof of consent

  Legal basis

  Your consent, confirmed by email

  Retention period

  Until you unsubscribe, then 30 days

• Member account

  Data involved

  Display name, email, language, sign-in method, sign-in log

  Legal basis

  Performance of the service you ask for

  Retention period

  Until the account is deleted; inactive accounts deleted after 3 years; unconfirmed sign-ups deleted after 7 days

• Page history

  Data involved

  Pages viewed, with their date

  Legal basis

  Your consent (off by default)

  Retention period

  12 months, erasable at any time

• Comments and reviews

  Data involved

  Text, rating, linked account

  Legal basis

  Your consent and our legitimate interest in moderation

  Retention period

  While published or until the account is deleted; rejected comments: 90 days

• Audience measurement

  Data involved

  Page views, journeys, device (Google Analytics 4)

  Legal basis

  Your consent

  Retention period

  12 months

• Advertising and conversion measurement

  Data involved

  Advertising identifiers, hashed email and phone, IP address, browser (Meta)

  Legal basis

  Your consent

  Retention period

  13 months at most

• Form improvement

  Data involved

  Step reached or abandoned, language, with no identity attached

  Legal basis

  Our legitimate interest; anonymous data

  Retention period

  No personal data kept

• Security and spam prevention

  Data involved

  IP address, technical signals, server logs

  Legal basis

  Our legitimate interest in protecting the site and its forms

  Retention period

  12 months at most

• Clients: invoicing and legal obligations

  Data involved

  Identity, contact details, billing, history of the relationship

  Legal basis

  Performance of the contract and legal obligations

  Retention period

  Statutory period that applies (accounting, contracts)

Conversations, browsing history, expired sessions, inactive or unconfirmed accounts and rejected comments are deleted by an automatic purge.

The assistant “Azur” is an artificial intelligence, not a person. It opens only after your explicit consent: without it, no message is processed. The language model is provided by OpenAI.

What is sent to the provider. The text of your message, the latest exchanges in the conversation (eight messages at most) and extracts of our own public content, which serve as its context. Your name, email and phone are not sent to it. Each message also goes through an automatic moderation check by the same provider, which detects insults and prohibited content.

What we keep. The conversation, the language, the page you opened it from and the topics discussed, tied to a random identifier (cookie) or to your member account. It is deleted automatically 12 months after the last message; a member can also erase it at any time from their area.

If you leave your contact details, a contact and a request are created in our sales-tracking tool, with an excerpt of the conversation, so that an expert can get back to you.

Voice dictation and read-aloud, both optional, use your browser’s features. We receive only the text, never the audio recording.

Your data is accessible to the publisher and, as far as their task requires, to the providers below. We do not sell it.

• Hosting

  Role and data involved

  Virtual private server managed by the publisher and orchestrated with Coolify: all site data is stored there.

  When

  Always; the host’s identity is available on request

• Resend

  Role and data involved

  Sending of transactional emails (acknowledgements, confirmations, sign-in links, notifications): email address, first name and message content.

  When

  When an email is sent to you

• Cloudflare Turnstile

  Role and data involved

  Anti-bot check on forms: technical browser signals and IP address.

  When

  When you submit a form

• OpenAI

  Role and data involved

  Assistant replies, and automatic moderation of messages and comments: the text of the messages.

  When

  Assistant: after your consent. Comments: when submitted

• Google Analytics 4 (Google)

  Role and data involved

  Audience measurement.

  When

  After your consent, if the service is enabled on the site

• Meta (Pixel and Conversions API)

  Role and data involved

  Advertising conversion measurement: advertising identifiers, hashed (SHA-256) email and phone, IP address, browser.

  When

  After your consent to advertising, if the service is enabled on the site

• Google, Meta (Facebook), LinkedIn

  Role and data involved

  Social sign-in: identifier, name, email and profile picture.

  When

  Only if you choose this sign-in method

• Appointment booking

  Role and data involved

  When a booking link is offered to you, it opens the online booking service (Cal.com): name, email and chosen time slot.

  When

  Only if you book a slot

We may also have to disclose data to an authority where the law requires it.

Some providers (OpenAI, Resend, Cloudflare, Google, Meta) are established outside Tunisia and outside the European Economic Area, notably in the United States. Your data may therefore be processed there.

We limit what we pass on to what is strictly necessary, we choose providers that publish contractual data-protection commitments, and we take care to meet the conditions the applicable law sets for international transfers. For services subject to your consent (assistant, audience measurement, advertising), refusing is enough to prevent any transfer.

The server that hosts the site is managed by us; to find out where it is located, see the “Hosting” section of the legal notice.

The first time you visit, a banner asks for your choice. “Reject all” is as easy as “Accept all”, and nothing is set for audience measurement or advertising before you agree.

Trackers fall into three categories, the ones in the banner: necessary (always on), audience measurement and advertising (only with your consent). Your choice is remembered for six months; you can change it at any time with “Manage trackers”, at the bottom of every page.

The “audience measurement” and “advertising” categories concern only the services actually enabled on the site.

Two temporary browser memories (session storage) keep, until you close the tab, the draft of the project form and the state of the conversation with the assistant. They stay in your browser.

You can also block or delete cookies in your browser settings. The site remains readable, but some features, such as signing in or the remembered theme, will stop working.

Exchanges with the site are encrypted (HTTPS). Passwords are never stored in clear, only as a hash; session tokens are likewise kept only as a hash. Access to the administration area is protected by authentication and limited to authorised people, and the forms are protected against bots and abuse.

No system is infallible. If a data breach were likely to put you at risk, we would tell you, and the competent authority, where the law requires it.

You have the right to access, rectify, erase, object to and port your data, and to withdraw your consent at any time. To exercise them, write to us; we reply within 30 days.

• Access: get a copy of the data we hold about you.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure: ask for your data to be deleted, where the law allows.
• Objection: refuse a processing activity, in particular marketing.
• Portability: receive your data in a machine-readable format.
• Restriction: ask for a processing activity to be suspended (for people in the European Union).
• Withdrawal of consent: at any time, without affecting what was done before.

Write to us through the Contact page. To prevent anyone else from obtaining your data, we may ask you to confirm your identity, for example by replying from the email address concerned.

Without writing to us. From your member area, you can download your data, erase your history and your conversations with the assistant, or delete your account. You can also unsubscribe from the newsletter at any time, in one click, from your member area or from the unsubscribe link in our emails.

Our practices rely on Tunisian Organic Law No. 2004-63 on the protection of personal data and, for visitors from the European Union, on Regulation (EU) 2016/679 (GDPR). Visitors from the Gulf and elsewhere enjoy the same basic rights, subject to the local rules that apply to them.

If you believe your rights are not being respected, you may contact the Instance nationale de protection des données personnelles (INPDP), the supervisory authority in Tunisia. If you live in the European Union, you may contact the data-protection authority of your country (in France, the CNIL).

We invite you to write to us first: we would rather settle a difficulty directly, and quickly.

The site is aimed at professionals. It is not intended for minors, and we do not knowingly collect their data.

This policy changes as our practices do. The date of the last update is at the top of the page; for any significant change, we say so on the site.