Privacy policy

Last updated: 7 October 2026

Data controller

CLAIRAI, SAS registered with the Paris Trade and Companies Register under number 994 023 539, 122 rue Amelot, 75011 Paris, represented by Nicolas Mathieu. For questions about your data: nicolas@clairai.fr.

Data processed and purposes

Website visits

Data: IP address, date and time, requested URL and parameters, referring page and browser, recorded in hosting logs.
Purpose: Operate the site, prevent abuse and count visits, including those from links sent to businesses or included in email signatures.
Legal basis: CLAIRAI’s legitimate interest in site security and measuring interest in its services. No cookie is used for this counting.
Retention: 30 days, then automatic deletion.

Online assessments (application reliability, website and SEO contract, tools, AI in teams and website)

Data: None of these questionnaires, including the “tools”, “AI in teams” and “website” assessments, asks for a name or email. Answers and the score or result are processed in your browser. If you book a call, Google Calendar collects the contact details needed for booking. Any advertising measurement is described below.
Purpose: Show your score or, for the “tools”, “AI in teams” and “website” assessments, your solid points, actions and a profile, together with your priority risks or gaps at the end of the questionnaire, then let you book a call with Nicolas Mathieu.
Legal basis: Answers stay in your browser. A booking is made at your request; advertising measurement remains subject to cookie consent.
Retention: ClairAI does not store answers; they disappear when the page closes or reloads. For bookings, contact details are retained for three years after the last contact, as with other prospect discussions.

Questionnaire usage statistics

Data: For each online assessment, including the “tools”, “AI in teams” and “website” assessments: questionnaire type, journey version, start, number of questions displayed and answered, end of the journey and click to the booking page. A click is not a confirmed booking. Each event carries a distinct random identifier to avoid counting a repeated delivery twice. No visitor identifier, answer, score, contact detail, advertising parameter or page address is included in these events.
Purpose: Produce internal statistics on questionnaire usage and interruptions to improve usability. These statistics are neither sent to Meta nor combined with advertising or booking data.
Legal basis: CLAIRAI’s legitimate interest in measuring and improving its questionnaires. This measurement sets no cookies and uses no browser storage. Do Not Track and Global Privacy Control signals disable these deliveries.
Retention: 30 days in hosting logs, accessible only to authorised people. Technical request logs may also contain the IP address and browser, as described under “Website visits”; they are not used in the usage report.

Advertising measurement and targeting (Meta pixel)

Data: Pages viewed, IP address, browser, Meta cookie identifiers and, if logged into Facebook or Instagram, association with your account. For quizzes: displayed and completed steps, question identifier and position, journey version, time on questions, completion, qualification and booking clicks. Entered answers are not sent to Meta.
Purpose: Measure ClairAI advertising effectiveness on Facebook and Instagram and show ads to people interested in its services.
Legal basis: Your consent, collected through the cookie banner. Without it, the pixel does not load. You can withdraw consent at any time as easily as you gave it.
Retention: Your acceptance or refusal is stored in your browser for 13 months, then you are asked again. Meta cookies expire within 13 months; Meta retains received data according to its own policy.

Advertising measurement and targeting (LinkedIn Insight Tag)

Data: Pages viewed, IP address, browser, LinkedIn cookie identifiers and, if you are signed in to LinkedIn, the link to your account. ClairAI only receives aggregated statistics, without visitors' identities.
Purpose: Measure the effectiveness of ClairAI's LinkedIn ads and show those ads to people interested in its offers.
Legal basis: Your consent, collected through the same cookie banner as the Meta pixel. Without your consent, the tag is not loaded. You can withdraw consent at any time.
Retention: Your choice is kept in your browser for 13 months. LinkedIn cookies expire after 13 months at most; LinkedIn Ireland Unlimited Company keeps the data it receives under its own policy.

“Talk to Nicolas” form on Facebook and Instagram

Data: Name, email address, company, company website, a description of what is blocking you and your preferred timeline, entered in Meta’s advertising form. Meta prefills your name and email from your account; you can change them before sending.
Purpose: Get back to you, at your request, to discuss your needs and then prepare a possible proposal.
Legal basis: Pre-contractual steps taken at your request when you send the form.
Retention: Three years after the last contact, as for other exchanges with prospects. Meta Platforms Ireland Limited hosts the form and keeps the answers in ClairAI’s advertising account; Meta also processes this data under its own policy.

LinkedIn enquiry form

Data: First name, last name, email address, company and company website, entered in LinkedIn’s advertising form. LinkedIn prefills information from your profile; you can change it before submitting.
Purpose: Responding to your request, for example a review of your company’s website, then discussing your needs and preparing a possible proposal.
Legal basis: Pre-contractual steps taken at your request when you send the form.
Retention: Three years after the last contact, as for other exchanges with prospects. LinkedIn Ireland Unlimited Company hosts the form and keeps the answers in ClairAI’s advertising account; LinkedIn also processes this data under its own policy.

Email or telephone discussions

Data: Name, company, professional contact details and message content.
Purpose: Answer questions, prepare a proposal, then deliver and invoice the service.
Legal basis: Precontractual steps at your request, followed by contract performance.
Retention: Three years after last contact for prospects. For clients, the contract term, then ten years for accounting records.

Messages et commentaires sur Instagram et Facebook

Data: Identifiant attribué par Meta à votre compte pour la Page ClairAI ou @clair_ai_idf, nom et nom d’utilisateur, indication d’abonnement au compte, contenu des messages et commentaires adressés à ClairAI, réponses au parcours de questions et entreprise indiquée.
Purpose: Répondre automatiquement aux personnes qui écrivent ou commentent un mot-clé, envoyer le lien demandé, préparer un échange avec Nicolas. Les autres messages sont lus et traités par Nicolas. Aucune relance n’est envoyée après un silence.
Legal basis: Pre-contractual steps taken at your request, when you write or comment to obtain information.
Retention: Douze mois après le dernier échange, puis suppression automatique. Les données sont traitées par Meta (messagerie), Google Cloud (base de données, Union européenne) et Resend (notification à Nicolas). Pour effacer vos données à tout moment, écrivez « SUPPRIMER » dans la conversation ou à l’adresse ci-dessous.

ClairAI Publisher (TikTok)

Data: For ClairAI clients who connect their TikTok account: TikTok identifier (open_id), display name and avatar URL, OAuth access and refresh tokens (encrypted at rest), posting settings offered by TikTok (privacy options, comments, Duet, Stitch, maximum duration), the video and caption prepared by ClairAI, the settings the client chose, and the post’s identifier and status. ClairAI does not read the account’s other videos, followers, messages or analytics.
Purpose: To let the client approve, edit and then post the video prepared for them to their own TikTok account through TikTok’s Content Posting API, and to show the post’s status. Videos and captions are used only to make the approved post. No advertising, no profiling, no sale of data.
Legal basis: Performance of the contract with the client (Article 6(1)(b) GDPR).
Retention: TikTok tokens and profile data: until the client disconnects, then deleted. Uploaded videos: deleted 30 days after posting. Post records (caption, settings, identifier, status): 12 months.
Recipients: TikTok (TikTok Technology Limited for the European Economic Area) receives the video, caption and settings, at the client’s request, to post them; TikTok processes this data under its own policy. Google Cloud (Google Ireland Limited), region europe-west1 (Belgium), hosts the database and video storage. No other recipients.
Disconnection and deletion: The “Disconnect TikTok” button in ClairAI Publisher revokes the authorisation with TikTok and deletes the tokens and profile data. The client can also remove the authorisation in the TikTok app settings. When the contract ends, or on simple request to nicolas@clairai.fr, the client’s data is deleted. The rights described below apply.

Business prospecting

Data: Company name, town, activity, website and professional contact details published by the company or in public registers.
Purpose: Present a ClairAI offer relevant to the recipient’s professional activity.
Legal basis: CLAIRAI’s legitimate interest in contacting professionals. You may object at any time by replying or writing to the address below.
Retention: Three years after last contact. Following an objection, only information necessary to avoid contacting you again is retained.

Cookies and local storage

If you accept through the cookie banner, clairai.fr loads the Meta pixel (Meta Platforms Ireland Limited) and the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company), which set advertising measurement and targeting cookies. If you decline or make no choice, no advertising cookie is set. Your choice is stored in your browser. Meta and LinkedIn process this data under their privacy policies (Meta, LinkedIn); ClairAI, Meta and LinkedIn are joint controllers for collecting and transmitting this data.

No other audience measurement or advertising cookies are set. When you choose FR or EN, the choice is stored in your browser to show the right language on your next visit. It is not sent to ClairAI and can be deleted through browser settings.

The /seo/apercu preview page displays a Google Maps map. When loaded, Google receives your IP address and may set its own cookies under its privacy policy. Information entered in this preview is used only to display it in your browser.

Recipients and transfers

Your data is processed by Nicolas Mathieu for ClairAI and is never sold. Google Ireland Limited acts as processor for website hosting (Firebase Hosting) and email (Google Workspace). With your consent, Meta Platforms Ireland Limited receives Meta pixel data. If you fill in an advertising form, Meta Platforms Ireland Limited or LinkedIn Ireland Unlimited Company hosts it and keeps the answers. Assessment results appear at the end of the questionnaire; no results email is sent. If you book a call from an assessment page, the displayed calendar is provided by Google and entered contact details are used to arrange the appointment. Transfers outside the European Union are governed by the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

For ClairAI Publisher, TikTok receives the video, caption and settings the client approved so as to post them to their account, and Google Cloud hosts the service’s data. They are neither sold nor used for advertising.

Your rights

You may request access, rectification, erasure, restriction or portability of your data, object to processing and provide instructions for your data after death. Write to nicolas@clairai.fr ; you will receive a reply within one month.

If you believe your rights are not respected, you may complain to the CNIL at cnil.fr.