ShiftAI

Privacy Policy

Last updated: December 2025

Data Controller

Company name: ShiftAI SASU

Address: 58 rue de Monceau, 75008 Paris, France

Email: [email protected]

Personal Data Collected

We collect the following categories of personal data:

Identity Data

  • Last name, first name
  • Email address
  • Phone number
  • Company name and position

Connection Data

  • IP address
  • Browser type and version
  • Operating system
  • Date and time of visit

Navigation Data

  • Pages visited
  • Time spent on each page
  • Links clicked

Processing Purposes

Your personal data is processed for the following purposes:

  • Managing your contact and information requests
  • Sending commercial communications and newsletters (with your consent)
  • Improving our website and services
  • Complying with our legal and regulatory obligations
  • Detecting and preventing fraud

Legal Basis for Processing

The processing of your personal data is based on:

  • Your consent (for newsletters and marketing communications)
  • The execution of a contract or pre-contractual measures
  • Compliance with a legal obligation
  • Our legitimate interest (security, fraud prevention, website improvement)

Data Retention Period

Your data is retained for the following periods:

  • Contact requests: 3 years from the last contact
  • Marketing prospects: 3 years from the last contact or withdrawal of consent
  • Connection data: 13 months

Data Recipients

Your personal data may be transmitted to:

  • ShiftAI SASU employees authorized to access it
  • Our technical service providers (hosting, email, analytics)
  • Competent authorities, at their request and in accordance with applicable legislation

We do not transfer your data outside the European Union. If such a transfer becomes necessary, we will ensure an adequate level of protection in accordance with the GDPR.

Your Rights

In accordance with the GDPR, you have the following rights:

  • Right of access: obtain confirmation of the processing of your data and a copy of it
  • Right to rectification: request the correction of inaccurate or incomplete data
  • Right to erasure ("right to be forgotten"): request the deletion of your data under certain conditions
  • Right to restriction: request the limitation of the processing of your data
  • Right to data portability: receive your data in a structured format and transmit it to another controller
  • Right to object: object to the processing of your data for legitimate reasons
  • Right to withdraw consent: withdraw your consent at any time for processing based on consent

To exercise these rights, please contact us at: [email protected]

You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) if you believe that the processing of your data violates the regulations.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or alteration.

These measures include, but are not limited to:

  • Encrypted data transmission (HTTPS)
  • Secure access control
  • Regular security audits
  • Staff training in data protection

Cookies

For information on the use of cookies on this site, please consult our cookie policy.

Policy Modifications

We reserve the right to modify this privacy policy at any time. Any modification will be published on this page with an updated date. We encourage you to review this policy regularly.

Contact

For any questions regarding this privacy policy or the processing of your personal data, please contact us at:

[email protected]