Privacy Policy

Last updated: July 20, 2026

1. Data controller

This website and the CPX AI Platform are operated by CPX CONSULTING, a limited liability company registered with the Nancy Trade and Companies Register under number 849 906 979.

The publisher's full contact details are provided in the website's Legal Notice.

For any question relating to the protection of personal data, you may contact CPX CONSULTING using the contact details provided in the Legal Notice.

2. Data collected

In connection with the use of the website and the CPX AI Platform, we may collect the following categories of data:

• identity (first name, last name);
• professional contact details (email, phone, company);
• login information;
• IP address and technical logs;
• billing data;
• information relating to subscriptions taken out;
• content submitted to the platform;
• support tickets and exchanges with our teams;
• platform usage data.

3. Purposes of processing

Data is processed in order to:

• create and manage client accounts;
• perform contracts and subscriptions;
• ensure billing and payment tracking;
• provide the artificial intelligence services offered;
• manage support requests;
• ensure the security of the platform;
• produce usage statistics;
• comply with our legal and regulatory obligations.

4. Legal bases

Processing is based on:

• the performance of a contract;
• compliance with legal obligations;
• CPX CONSULTING's legitimate interest;
• consent, where required.

5. Data recipients

Data may be transmitted to service providers involved in operating the service, in particular:

• Stripe (payment);
• Brevo (transactional emails and notifications);
• Anthropic (artificial intelligence services);
• HeyGen (video generation, when the module is used);
• OVHcloud (hosting);
• Qdrant (document indexing).

These service providers only access data to the extent necessary for the performance of their services.

6. Data retention

Data is retained for the period necessary to perform the contract and comply with legal obligations.

Billing data may be retained for up to ten years in accordance with applicable regulations.

Technical and security logs are retained for a period appropriate to security and audit needs.

7. International transfers

Some subcontractors may be located outside the European Union.

Where necessary, transfers are governed by the mechanisms provided for by the GDPR, in particular the European Commission's standard contractual clauses.

8. Security

CPX CONSULTING implements technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or disclosure.

9. Your rights

In accordance with the GDPR, you have the following rights:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction;
• right to object;
• right to portability;
• right to withdraw your consent where it constitutes the basis of the processing.

You may exercise these rights by contacting CPX CONSULTING.

10. Complaint

You have the right to lodge a complaint with the CNIL (www.cnil.fr) if you believe that your rights are not being respected.

11. Amendment of this policy

CPX CONSULTING reserves the right to amend this policy to take into account legal, regulatory, or technical developments.