Privacy Policy
Last updated: 2026-02-11
At Collective Insight, protecting your personal data is at the heart of our commitments. This policy details how your data is collected, processed and protected.
Hosting and Infrastructure
All your data is hosted in France by Scaleway, in a datacenter located in Paris. The database is organized around client tenants to ensure data isolation.
Host: Scaleway (Paris datacenter, France)
Isolated tenants: client tenant are isolated in databases
Artificial Intelligence
The AI used by Collective Insight is powered by Mistral, a French and European model. Your data is never sent outside the European Union for AI processing.
AI Model: Mistral (French / European)
No data transfer outside the EU for AI processing
No Data Resale
Your data is never sold to third parties. It is used exclusively within the scope of the collective intelligence mission in which you participate.
Study Manager Access
As part of the mission analysis, the study manager (Project Manager) may access certain data. This access is strictly limited to the scope of the mission and does not result in any personal disclosure outside of it.
Accessible data: validated individual synthesis, questionnaire responses
Scope: mission analysis only, no personal disclosure outside the mission
Guarantee: raw data is anonymized in the collective synthesis
Configuration: access to individual data can be disabled by the study manager for each mission
Data Encryption
All communications are encrypted in transit via HTTPS/TLS. Data are encrypted at rest.
Data Retention Period
Data collected during a mission is retained for 30 days after the mission ends ("completed" status). After this period, data is automatically purged.
Retention: 30 days after mission completion
Automatic purge after retention period expires
Your Rights
In accordance with GDPR, you have the following rights over your personal data:
Right of access: view the data we hold about you
Right of rectification: correct inaccurate information
Right of deletion: request the erasure of your data
Processing time: 24 hours (target)
Contact — Exercise Your Rights
To exercise your rights or for any question related to data protection, contact our Data Protection Officer (DPO):
dpo@collectiveinsight.fr