Legal

Privacy policy

Last updated: 4 November 2026

This privacy policy explains how Aydee, a French simplified joint-stock company (société par actions simplifiée) registered with the Paris Trade and Companies Register (RCS) under number 981 196 330, whose registered office is at 88 rue Raymond Losserand, 75014 Paris, France ("Aydee", "we"), processes personal data when you visit the aydee.app website (the "Site") or use the Aydee platform and mobile app (the "Service").

It is drawn up in accordance with Regulation (EU) 2016/679 (the "GDPR") and the French Data Protection Act ("Informatique et Libertés"). We collect only the minimum data necessary, we never sell your data and we do not use it for advertising purposes.

1. Who is responsible for your data?

Aydee's role depends on your situation:

Site visitors, contact or demonstration requests, commercial relationship: Aydee is the data controller.
Users of the Service (sales staff, managers, trainers, head-office teams): the data processed in the Service is processed on behalf of the User's customer company, which is the data controller; Aydee acts as processor. To exercise your rights over that data, please contact your employer first; we assist it in responding.

If you have any question about your data, you can write to us at contact@aydee.app.

2. Data collected, purposes and legal bases

Below, for each purpose, you will find the data concerned, the legal basis for the processing and the retention period.

Responding to your requests (contact and demonstration form): Data: first name, last name, e-mail address, subject and content of your message. Legal basis: pre-contractual measures and Aydee's legitimate interest in responding to professional enquiries. Retention: for as long as needed to handle your request, then three (3) years at most after the last exchange.
Protecting the form against bots (Cloudflare Turnstile): Data: IP address and technical signals from your browser, analysed by Cloudflare at the time of submission. Legal basis: Aydee's legitimate interest in securing the Site. Retention: Aydee keeps the IP address only in its technical logs, where the verification fails; Cloudflare applies its own retention period.
Measuring Site audience (Google Analytics 4): Data: pages viewed, source of the visit, device and browser type, approximate location and Google Analytics cookie identifiers, only if you have clicked "Accept all". Legal basis: your consent. Retention: cookies of thirteen (13) months at most; audience data kept for fourteen (14) months at most.
Remembering your cookie choice: Data: an "aydee_consent" cookie that records your choice. Legal basis: cookie strictly necessary to give effect to your choice, based on Aydee's legitimate interest in respecting it. Retention: six (6) months.
Displaying the Site and playing its videos (hosting and delivery network): Data: IP address and technical connection data, processed by our providers to deliver the pages and videos. Legal basis: Aydee's legitimate interest in providing and securing the Site. Retention: technical logs kept by the providers, in accordance with their own policies, for a limited period.
Providing the Service (platform and mobile app): Data: last name, first name, e-mail address, job title or team, training activity (paths followed, results, participation in challenges), technical data (IP address, device type, operating system, browser) and, with your permission, location. Legal basis: performance of the contract entered into with the customer company. Retention: the term of the customer's contract, then deletion or anonymisation at the end of the thirty (30) day export period following the end of the contract.
Managing the commercial relationship and invoicing: Data: business contact details of our customers' contacts, contracts and invoices. Legal basis: performance of the contract and legal obligation. Retention: the duration of the commercial relationship, then ten (10) years for accounting records.

3. Cookies and trackers

The Site uses strictly necessary cookies (remembering your choice, security) and, only with your consent, Google Analytics audience measurement cookies. We do not use any advertising cookies.

aydee_consent: essential, remembers your choice, six (6) months, set by Aydee
_ga and _ga_*: audience measurement, only with your consent, identify a browser pseudonymously, thirteen (13) months at most, set by Google

Until you have made a choice, the Google Analytics tag is loaded in "consent denied" mode (Google Consent Mode v2): no cookie is set and no audience measurement is associated with you. However, loading the tag from Google's servers inevitably transmits your IP address and information about your browser to Google.

You can refuse or withdraw your consent at any time: the "Essential only" button in the banner, the "Cookie preferences" link at the bottom of every page, or your browser settings to delete cookies already set. Refusing has no effect on your access to the Site. Your choice is kept for six (6) months, after which we ask you again.

4. Recipients and processors

Your data is accessible only to those people at Aydee who need it. We use the following providers, which act only on our instructions:

Cloudflare, Inc. (United States): hosting of the Site, delivery network, security and anti-bot verification (Turnstile)
BunnyWay d.o.o., Bunny.net (Slovenia): delivery of the Site's videos
Resend, Inc. (United States): e-mail delivery of messages sent through the contact form
Discord Inc. (United States): internal notification of the Aydee team when a contact message is received (name, e-mail address and message)
Google Ireland Limited (Ireland): audience measurement, only if you have accepted cookies
For the Service: a hosting provider whose servers are located in Germany

We do not sell or rent your data. We disclose it to other third parties only where the law requires us to or to protect our rights.

5. Transfers outside the European Union

Some of our providers (Cloudflare, Resend, Discord and Google) are established in the United States or may process data there. These transfers are governed either by the European Commission's adequacy decision on the EU–US data protection framework (Data Privacy Framework), where the provider participates in it, or by the European Commission's standard contractual clauses.

You may request a copy of the applicable safeguards by writing to contact@aydee.app.

6. Security

We implement appropriate technical and organisational measures: encrypted connection (HTTPS), access limited to the people who need it, anti-bot verification, and the use of recognised providers bound by contract.

As no method of transmission or storage is infallible, we cannot guarantee absolute security. In the event of a data breach, we comply with our notification obligations (to the CNIL, to the data subjects or to our customers, depending on our role).

7. Your rights

Under the GDPR, you have the following rights over your personal data:

Right of access: to obtain confirmation that we process your data and to receive a copy of it.
Right to rectification: to have inaccurate or incomplete information corrected.
Right to erasure: to request the deletion of your data where the legal conditions are met.
Right to restriction: to request that the use of your data be suspended in certain cases.
Right to data portability: to receive the data you have provided to us in a structured, commonly used format.
Right to object: to object, on grounds relating to your particular situation, to processing based on our legitimate interest, and at any time to direct marketing.
Right to withdraw your consent: at any time, without affecting the lawfulness of the processing carried out before the withdrawal.
Post-mortem directives: to define what happens to your data after your death.

To exercise your rights, write to contact@aydee.app stating the purpose of your request. Where we have reasonable doubts, we may ask you for proof of identity. We respond within one (1) month, which may be extended by two (2) months for complex requests.

If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés, the French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at cnil.fr.

8. Minors

The Site is intended for professionals and is not directed at minors. We do not knowingly collect data from minors through the Site.

9. Changes to this policy

We may update this policy, in particular if our processing or our providers change. The date of the last update appears at the top of this page; in the event of a material change, we will inform you by e-mail or in the Service.

10. Contact us

For any question about this policy or your data:

By e-mail: contact@aydee.app
Through our site: https://aydee.app/contact
By post: Aydee, 88 rue Raymond Losserand, 75014 Paris, France
By phone: +33 (0)6 79 68 97 23

This policy is drafted in French. Translations are provided for information only; in the event of discrepancy, the French version prevails.