Privacy Policy

Last updated: 2026-02-11

At Collective Insight, protecting your personal data is at the heart of our commitments. This policy details how your data is collected, processed and protected.


Hosting and Infrastructure

All your data is hosted in France by Scaleway, in a datacenter located in Paris. The database is organized around client tenants to ensure data isolation.

  • Host: Scaleway (Paris datacenter, France)

  • Isolated tenants: client tenant are isolated in databases

Artificial Intelligence

The AI used by Collective Insight is powered by Mistral, a French and European model. Your data is never sent outside the European Union for AI processing.

  • AI Model: Mistral (French / European)

  • No data transfer outside the EU for AI processing

No Data Resale

Your data is never sold to third parties. It is used exclusively within the scope of the collective intelligence mission in which you participate.

Study Manager Access

As part of the mission analysis, the study manager (Project Manager) may access certain data. This access is strictly limited to the scope of the mission and does not result in any personal disclosure outside of it.

  • Accessible data: validated individual synthesis, questionnaire responses

  • Scope: mission analysis only, no personal disclosure outside the mission

  • Guarantee: raw data is anonymized in the collective synthesis

  • Configuration: access to individual data can be disabled by the study manager for each mission

Data Encryption

All communications are encrypted in transit via HTTPS/TLS. Data are encrypted at rest.

Data Retention Period

Data collected during a mission is retained for 30 days after the mission ends ("completed" status). After this period, data is automatically purged.

  • Retention: 30 days after mission completion

  • Automatic purge after retention period expires

Your Rights

In accordance with GDPR, you have the following rights over your personal data:

  • Right of access: view the data we hold about you

  • Right of rectification: correct inaccurate information

  • Right of deletion: request the erasure of your data

  • Processing time: 24 hours (target)


Contact — Exercise Your Rights

To exercise your rights or for any question related to data protection, contact our Data Protection Officer (DPO):

dpo@collectiveinsight.fr