ClaireChains SAS
Privacy Policy
Last updated:
1. Who we are
This website (clairesecurity.ai) is run by ClaireChains SAS, 60 rue François 1er, 75008 Paris, France ("ClaireChains", "we"). ClaireChains is the data controller for the personal data described in this policy. For any privacy question or request, write to info@clairesecurity.ai.
2. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Contact form: enquiry type, name, email, company, message | Answer your request, arrange a demo and follow up | Steps you ask for before a contract (art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (art. 6(1)(f)) |
| Model API access form: name, work email, company or team, use case, deployment preference, message | Assess your access request and send API access details | Steps you ask for before a contract (art. 6(1)(b)) |
| Analytics: pages visited, device and browser data, an online identifier, approximate location | Measure how the site is used so we can improve it | Your consent (art. 6(1)(a)), only if you accept analytics cookies |
| Technical logs: IP address, request time, browser type | Deliver the site and keep it secure | Our legitimate interest in running a secure website (art. 6(1)(f)) |
Form fields marked as required are needed to answer you. We do not use your data for automated decision-making or profiling, and we do not sell it.
3. Cookies and local storage
Analytics cookies are set by Google Tag Manager and Google Analytics only after you click "Accept analytics". If you reject them, or make no choice, no analytics tags are loaded. Advertising storage is always disabled. We keep your choice for six months and then ask again.
Without asking, we store only what the site needs to work: your theme, your language and your cookie choice, kept in your browser's local storage. They are never sent to us.
You can change or withdraw your choice at any time: .
4. Who receives your data
We share personal data only with service providers that process it on our behalf:
- Formspree, Inc. (United States), which receives and forwards form submissions
- Netlify, Inc. (United States), which hosts the website and keeps technical logs
- Google Ireland Limited and Google LLC, for analytics, only with your consent
Where data is transferred outside the European Economic Area, the transfer relies on the EU-US Data Privacy Framework for certified providers, or on the European Commission's Standard Contractual Clauses.
5. How long we keep it
- Enquiries and access requests: up to three years after our last contact with you, unless they lead to a contract
- Analytics data: up to 14 months
- Your cookie choice: six months
- Technical logs: as set by our hosting provider, for security purposes only
6. Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Where we rely on your consent you can withdraw it at any time, without affecting earlier processing. Write to info@clairesecurity.ai. We answer within one month.
You can also complain to the French data protection authority, the CNIL (cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07), or to the authority in your country.
7. Changes
We will update this policy when our practices change. The date at the top shows the latest version.