Privacy Policy

LAGON TECHNOLOGIES SAS (operating under the trade name “FINEGRAIN”), registered at 3 Rue Joliot-Curie, 91190 Gif-sur-Yvette, France, with the Evry Trade and Companies Register under No. 922 507 405 (“we,” “us,” or “Finegrain”), is committed to protecting your personal data in accordance with applicable laws, including the General Data Protection Regulation (GDPR) and French data protection laws.This Privacy Policy explains how we collect, process, and protect your personal data when you visit https://finegrain.ai/ (“Website”) or use or access our platform Finegrain (“Platform”).For any questions regarding this Privacy Policy or your personal data, please contact us:

1. Roles

  • Website: For personal data collected via the Website (e.g., IP addresses, contact forms), Finegrain acts as a data controller.
  • Platform: For personal data uploaded to the Platform by Users, Finegrain acts as a data processor, processing personal data strictly on Users’ instructions. Please note that the Platform is not designed for Users to upload personal data, and we strongly discourage such use.

2. Personal Data We Collect and Process

2.1 Website Visitors

We may collect the following personal data about you when you interact with our Website:
  • Contact Information: Name, email address, and any other details you provide via the contact form.
  • Technical Information: IP address, browser type, device type, and browsing activity for security and analytics purposes.
  • Cookies: Information collected via cookies, subject to your consent. See Section 8 for details.

2.2 Platform Users

When you use the Platform, we may process:
  • Account Data: Name, email address, and company details for subscription management.
  • Usage Data: Metadata generated from your use of the Platform (e.g., frequency and duration of use).
  • User Data: If you upload personal data to the Platform (despite the Platform not being designed for this purpose), we process it solely as a data processor in accordance with your instructions and knowledge.

3. Purposes of Processing and Legal Bases

3.1 Website Visitors

We may process your personal data for the following purposes:
  • Responding to inquiries submitted via the contact form (Consent).
  • Ensuring the security of the Website and analyzing its usage (Legitimate Interest).
  • Managing cookies and tracking tools as described in Section 8 (Consent).

3.2 Platform Users

We may process your personal data to:
  • Provide and maintain the Platform (Contractual Necessity).
  • Respond to your customer service requests (Legitimate Interest).
  • Comply with legal obligations (Legal Obligation).
  • Process User Data strictly according to your instructions (Contractual Necessity).

4. Data Sharing and Hosting

We share your personal data only with trusted third parties, such as:
  • Service Providers: Hosting providers, payment processors (e.g., Stripe), and analytics tools.
  • Legal Authorities: Where required by law or for legal proceedings.
For Platform Users, we do not access or share User Data uploaded to the Platform except as instructed by you, the data controller.Personal data collected via our Website or the Platform is hosted in the United States on servers provided by our hosting provider, Vercel Inc. (Address: 440 N Barranca Ave #4133, Covina, California 91723, United States).Vercel Inc. is certified under the EU-U.S. Data Privacy Framework (DPF), which recognizes that Vercel Inc. meets data protection standards equivalent to those required under the GDPR.

5. Retention Periods

We retain your personal data only for as long as necessary:

5.1 Website Visitors

  • Contact Form Data: Retained for 12 months from the last interaction.
  • Cookies: Retention periods vary by cookie type (see Section 8).

5.2 Platform Users

  • Account Data: Retained during the subscription term and for five (5) years thereafter for legal purposes.
  • User Data: Retained until account closure or upon your instructions, except where retention is required by law or for legal claims.

6. Your Rights

Under GDPR, you have the following rights regarding your personal data:
  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data under certain conditions.
  • Restriction: Limit processing of your personal data in specific cases.
  • Portability: Receive your personal data in a structured, machine-readable format.
  • Objection: Object to processing for legitimate interests or direct marketing.
  • Withdraw Consent: Withdraw consent for processing based on consent.
To exercise your rights, contact us at [Insert Email Address]. You may also lodge a complaint with the CNIL (https://www.cnil.fr/fr/plaintes).

7. Data Security

We implement appropriate technical and organizational measures to safeguard your personal data, including:
  • Encryption and secure connections.
  • Regular audits and monitoring of access to systems.
  • Limited access to personal data on a need-to-know basis.

8. Cookies and Tracking Tools

Our Website uses cookies to improve functionality and analyze usage.

8.1 Types of Cookies

  • Essential Cookies: Necessary for the Website to function.
  • Analytics Cookies: Track usage for performance improvements (subject to consent).
  • Marketing Cookies: Used for targeted advertising (subject to consent).

8.2 Managing Cookies

You can manage or withdraw your cookie preferences on our Website. For browser-specific instructions, consult your browser’s help documentation.

9. Updates to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page.

10. Governing Law

This Privacy Policy is governed by French law. Any disputes shall be subject to the exclusive jurisdiction of the courts of Evry, France.