2. Privacy Policy

Last updated: [EFFECTIVE DATE]

[ENTITY NAME] respects your privacy and complies with the EU General Data Protection Regulation (GDPR) and applicable French law. This policy explains what personal data we process and your rights.

2.1 Data controller

The data controller is [ENTITY NAME], [REGISTERED ADDRESS]. For any privacy matter, contact contactus@alythia.com.

2.2 What we collect

• Information you give us via forms: name, email address, company/organisation, job title, country, and the content of your message or feedback.
• Authentication data, if you sign in: identifiers provided through our authentication provider (Google / Firebase Authentication), such as your email address and account identifier. We do not receive your Google password.
• Technical and usage data collected automatically: IP address, browser and device type, pages viewed, and similar diagnostics, including via cookies or similar technologies.

We do not intentionally collect special-category data, and we ask you not to submit it through our forms.

2.3 Why we process it, and the legal basis (GDPR Art. 6)

• To respond to your enquiries and provide the Service — performance of a contract or steps prior to it, and our legitimate interest in responding.
• To operate, secure, and improve the Service — legitimate interest.
• To send updates only where you have opted in — consent (withdrawable at any time).
• To comply with legal obligations — legal obligation.

2.4 Cookies and analytics

The Service may use strictly necessary cookies to function and, where applicable, analytics cookies to understand usage. Non-essential cookies are used only with your consent where required. [If/when you add an analytics tool such as a privacy-focused analytics provider, name it here and link its policy.]

2.5 Processors and third parties

We use third-party providers ("processors") to run the Service, which may process limited personal data on our behalf, including: Google Firebase / Google LLC (authentication, hosting infrastructure), Google (embedded forms, if used), and our website hosting provider. These providers act under agreements that require appropriate safeguards. We do not sell your personal data, and we do not share it for third-party advertising.

Public satellite-data providers (Copernicus/ESA, NASA/NOAA/EOG) do not receive your personal data.

2.6 International transfers

Some providers (e.g. Google) may process data outside the European Economic Area, including in the United States. Where this occurs, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses and/or applicable adequacy frameworks.

2.7 Retention

We keep personal data only as long as necessary for the purposes above: enquiry and feedback data for as long as needed to handle your request and a reasonable follow-up period, then deletion or anonymisation; account data for the life of the account. [Adjust periods once finalised.]

2.8 Your rights

Under the GDPR you may: access your data; rectify it; erase it; restrict or object to processing; obtain portability; and withdraw consent at any time. To exercise these, contact contactus@alythia.com. You also have the right to lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr), or your local EU data-protection authority.

2.9 Security

We apply reasonable technical and organisational measures to protect personal data. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

2.10 Children

The Service is not directed to children under 16 and we do not knowingly collect their data.

2.11 Changes

We may update this policy; the "Last updated" date will change and material changes will be signalled on the Service.

2.12 Contact

Privacy questions or requests: contactus@alythia.com.

Alythia — these terms apply to the Service described above. Placeholders in [BRACKETS] are completed before launch.