Privacy Policy

Last updated: 5 June 2026

This policy explains how AI AUDIT processes your personal data, in accordance with the General Data Protection Regulation (GDPR) and applicable French data protection law.

1. Data controller

Gaël Gérard, sole trader (“AI AUDIT”), La Villeneuve Le Lage, 56240 Plouay, France. Contact: contact@artificialintelligence-audit.com.

2. Data we collect

• Identity and contact: name, email, company name (at checkout or in the mini-test).
• AI audit questionnaire answers: information about your company and processes, declared freely by you.
• Payment data: processed directly by Stripe. We do not store any card data.
• Browsing data: audience-measurement cookies (Google Analytics), set only after your consent.
• Technical logs needed to run and secure the service.

3. Purposes and legal bases

• Producing your audit and managing your order (including transactional emails): performance of the contract (Art. 6(1)(b) GDPR).
• Mini-test and sending your glimpse / commercial prospecting: your consent (Art. 6(1)(a)).
• Audience measurement: your consent to cookies.
• Accounting and legal obligations: legal obligation (Art. 6(1)(c)).
• Security and fraud prevention: legitimate interest (Art. 6(1)(f)).

4. Recipients and processors

Your data is never sold. It is shared only with the providers needed to run the service:

• Stripe — payment.
• Hostinger — email (messages from our domain).
• Google — storage of orders, responses and leads (Google Sheets) and audience measurement (Google Analytics).
• Netlify — site hosting and technical storage.

5. Transfers outside the EU

Some providers (Netlify, Stripe, Google) may process data in the United States. These transfers are governed by appropriate safeguards: European Commission Standard Contractual Clauses and/or Data Privacy Framework certification.

6. Retention periods

• Order data and audit answers: for the duration of the relationship, then legal archiving (accounting records: 10 years).
• Leads (mini-test): 3 years from the last contact.
• Audience-measurement cookies: 13 months maximum.

7. Cookies

The site does not use any audience-measurement cookie until you click “Accept” in the banner. You can decline with no impact on using the site, and change your choice at any time by clearing your browser cookies. Only Google Analytics (with IP anonymisation) is used for statistics.

8. Your rights

You have the rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw your consent at any time. To exercise them, write to contact@artificialintelligence-audit.com. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).