How we handle your data.

1. Preamble

The purpose of this privacy policy is to inform users of the website www.tailorlead.io and of the TailorLead platform about how their personal data is collected, used and protected.

This Privacy Policy applies to all data processing carried out by Aumetis, a société par actions simplifiée with a share capital of 3,000 euros, whose registered office is at 74 rue du Rocher, 75008 Paris, registered with the Paris Trade and Companies Register under number 943 230 441 R.C.S. Paris.

Aumetis processes personal data in accordance with the applicable regulations, in particular:

• +Regulation (EU) 2016/679 of 27 April 2016 (the "GDPR")
• +French Law no. 78-17 of 6 January 1978, as amended (the "French Data Protection Act")

In providing the TailorLead platform, Aumetis may act either as a data controller or as a data processor, on behalf of its professional clients.

2. Definitions

• +Site: the website accessible at www.tailorlead.io
• +Platform / Software: the TailorLead software platform
• +Aumetis: the company that publishes TailorLead
• +User: any natural person authorised to access the Site or the Platform
• +Client: any legal entity or natural person who has subscribed to the Services
• +Services: the features offered through the TailorLead Platform
• +Personal data: any information relating to an identified or identifiable natural person within the meaning of the GDPR

3. Principles governing the collection and processing of data

In accordance with Article 5 of the GDPR, Aumetis undertakes to ensure that personal data is:

• +processed lawfully, fairly and transparently in relation to the data subject
• +collected for specified, explicit and legitimate purposes
• +adequate, relevant and limited to what is necessary
• +accurate and, where necessary, kept up to date
• +kept in a form that permits identification for no longer than is necessary
• +processed in a way that ensures appropriate security

Aumetis strictly applies the principle of data minimisation and collects only the data that is strictly necessary.

4. Purposes of processing

4.1 Administration and operation of the Site

Data processed: technical browsing data (logs, IP address, browser type, strictly necessary cookies).

Purpose: the technical operation of the Site, improvement of the user experience, security and incident prevention.

Legal basis: the legitimate interest of Aumetis (Article 6(1)(f) GDPR).

Retention period: up to 12 months. Details of cookies and trackers are set out in the Cookie Policy.

4.2 Prospect management

Data processed: first name, last name, professional email address, telephone number, job title, company.

Purposes: getting in touch, providing information about the Services, B2B commercial prospecting.

Legal basis: consent (Article 6(1)(a) GDPR) and legitimate interest (Article 6(1)(f) GDPR).

Retention period: until subscription to the Services or, failing that, 3 years from the last contact.

4.3 Client relationship management

Data processed: identification and professional data, contractual and billing data, payment data.

Purposes: provision of the Services, management of contracts and billing, support and assistance.

Legal basis: performance of the contract (Article 6(1)(b) GDPR).

Retention period: for the duration of the contract, then up to 5 years after the end of the relationship.

4.4 Data from public sources

Data processed: professional data from official public sources whose origin is traceable (e.g. executives, legal representatives, beneficial owners), in particular from the INSEE/SIRENE, BODACC, Infogreffe and INPI registries and open databases.

Purpose: structuring and enrichment for strictly informative and analytical purposes, within the professional sourcing and analysis activities of our Clients.

Legal basis: the legitimate interest of Aumetis and its Clients (Article 6(1)(f) GDPR), together with a right to object that may be exercised at any time. Access to information on beneficial owners (beneficial-ownership register) is regulated and is open only on the basis of a legitimate interest, public access having been restricted since 31 July 2024.

Retention period: a period proportionate to the purpose, documented and reviewed regularly.

5. Processors and technical partners

Aumetis uses the following technical processors in operating the Site and the Platform:

• +OVHcloud: hosting of the Site and the data, in data centres located in France (European Union)
• +PostHog (posthog.tailorlead.io): product analytics and audience measurement; a self-hosted instance in France, with no data transmitted to PostHog Inc. This measurement, subject to prior consent and operated with an anonymised IP address, also covers session recording with all form fields masked (no input or password is captured), aggregated heatmaps, performance measurements, technical error tracking and any satisfaction surveys.
• +Calendly: scheduling of demo appointments; data processing in the United States, governed by the European Commission's standard contractual clauses
• +Resend: sending of transactional emails; processing in the United States, governed by the European Commission's standard contractual clauses

Each processor is bound to Aumetis by a contract guaranteeing an adequate level of protection for personal data.

6. Data transfers outside the European Union

Aumetis favours hosting and processing data within the European Union. Where some processors are located outside the EU (Calendly, Resend), Aumetis ensures that appropriate safeguards are in place, in particular through the use of the European Commission's standard contractual clauses.

7. Security measures

Aumetis implements appropriate technical and organisational measures to protect personal data:

• +encryption of data in transit and at rest
• +network security protocols
• +access control
• +careful selection of processors

Aumetis cannot, however, guarantee absolute security.

8. Your rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights:

• +the right of access, the right to rectification and the right to erasure of data (Articles 15, 16 and 17 of the GDPR)
• +the right to data portability (Article 20 of the GDPR)
• +the right to restriction of, and to object to, processing (Articles 18 and 21 of the GDPR)
• +the right not to be subject to a decision based solely on automated processing
• +the right to determine the fate of your data after death
• +the right to withdraw consent
• +the right to lodge a complaint with the CNIL, the French data protection authority (Article 77 of the GDPR)

Visit cnil.fr for more information about your rights.

9. Contact

For any question or to exercise your rights, you can contact Aumetis:

Aumetis – TailorLead
74 rue du Rocher, 75008 Paris – France
Email: contact@tailorlead.io

Aumetis may request proof of identity in the event of reasonable doubt.

10. Changes to the policy

Aumetis reserves the right to amend this Privacy Policy at any time to keep it in line with legal, regulatory or technical developments. The version in force is the one published on the Site.