Privacy Policy

This Privacy Policy describes how Altertable SAS ("Altertable", "we", "us", or "our") collects, uses, stores, and discloses personal data in connection with the use of our websites, hosted platform, as data controller (collectively, the "Services").

Our contact details are indicated in Section 12 "Contact" below.

We are committed to protecting personal data in accordance with applicable privacy and data protection laws, including the General Data Protection Regulation (GDPR) and relevant French and European regulations.

This Privacy Policy applies to individuals who engage with us as customers, prospects, users of our Services, or visitors to our websites ("you", "your").

1. Scope and Applicability

This Privacy Policy applies to the following data subjects in the following contexts:

• Visitors to our altertable.ai website
• Customers and their authorized users of our Services
• Individuals communicating with our teams for sales, or contractual matters

If you are an end user whose data is uploaded or processed by a customer via our Services, please note that we act as a data processor, and the customer is the data controller, for the provision of our Services.

2. Data We Collect

We collect and process a limited amount of personal data necessary to provide, maintain, and improve our Services. This may include:

• Identification and Contact Information: name, email, company, job title, credentials
• Technical and Usage Data: IP, browser, session logs, query usage, cookies
• Communications: information from product inquiries or requests
• Billing and Transaction Data: company address, tax IDs, subscription records

We do not collect or process sensitive categories of data.

3. Purpose and legal basis of Processing

We process personal data for:

• Account management. We carry out this processing on the basis of the agreement that customers enter with us to benefit from our Services.
• Website delivery and maintenance. We carry out this processing on the basis of our websites' terms and conditions of use.
• Services access requests. We carry out this processing in order to take steps at your request prior to entering into our Services agreement when you request access to use our Services.
• Services promotion. We carry out this processing based on our legitimate interest to promote our Services when visitors and potential customers show interest in them, for instance by subscribing to our newsletter on our website. Where consent is required for the promotion of our Services, we rely on consent. You can unsubscribe from our newsletters at any time by clicking on the unsubscribe link available in each email.
• Services analysis and improvement. We carry out this processing based on our legitimate interest to improve our Service, and develop new products and services. Where this processing is based on the use of cookies or similar technologies for which consent is required, we rely on website visitors or our hosted platform users' consent to cookies.
• Security. We carry out this processing based on our legitimate interest to provide secured and reliable Services, including to detect security threats to our Services.
• Legal compliance including responding to authorities or to data subjects' rights. We carry out this processing to comply with our legal obligations.
• Billing. We carry out this processing to comply with our legal obligations.
• Customer relationship management (beyond provision of our Services). We carry out this processing based on our legitimate interest to manage our customer relationships.
• Enforce our Services' terms and conditions. We carry out this processing based on our legitimate interest to protect the integrity, security, and safety of our Services, and our rights, privacy, safety or property along with your or other parties' rights, privacy, safety or property.

4. Data Sharing and Recipients

We share data only with:

• our internal teams
• authorized service providers including our data processors
• advisors
• affiliates
• any potential purchaser of our company, our assets or Services
• public authorities when required by law.

5. International Data Transfers

We may transfer personal data outside the European Economic Area (EEA) for the purposes listed under this Privacy Policy. Where data is transferred outside the EEA, Altertable ensures appropriate safeguards including Standard Contractual Clauses or adequacy mechanisms. You may request more information about the safeguards used by contacting us at [email protected].

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy. Retention periods vary depending on data type and legal requirements but generally include:

• Account data: retained during the contract and up to 5 years after termination
• Billing data: retained per financial regulations, which is 10 years in France
• Services logs: retained for up to 365 days

7. Data Security

We implement industry-standard technical and organizational measures such as TLS encryption, access controls, and security audits to protect your personal data.

8. Your Rights

Pursuant to the requirements and conditions of applicable data protection laws, you may request the exercise of the following data protection rights:

• Right to access your personal data
• Right to rectify your personal data
• Right to object the processing of your personal data
• Right to erase your personal data
• Right to request the portability of your personal data when the processing is based on your consent or the performance of a contract
• Right to restrict the processing of your personal data
• Right to give directives on the fate of your personal data after your death
• Right to withdraw your consent when the processing is based on your consent

To do so, contact us at [email protected]. We may ask for proof of identity if required to confirm your identity.

You also have the right to lodge a complaint before a data protection authority in connection with our processing of your personal data.

9. Cookies and Tracking

We use cookies in particular for session management, performance monitoring, and analytics. See our Cookie Policy for more details.

10. Children's Privacy

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we learn that we have collected such information without parental consent, where required, we will delete it promptly. If you believe we have information from a child under 18, please contact us at [email protected].

11. Updates to This Policy

This Policy may be updated to reflect changes in law or service operations. Updates will be posted here, and material changes will be communicated to users. Updates will enter into force upon posting.

12. Contact

Altertable SAS
26 rue du Commerce
92700 Colombes, France
Email: [email protected]