Privacy policy
Last updated: 7 September 2026
Key commitment: your data is never used to train our AI models.
Courtesy translation. In the event of any discrepancy, the French version prevails.
1. Data controller
The controller of your personal data is:
IA MARKETING
BAT B – RDC, 152 Avenue Général Frère, 69008 Lyon, France
Email: [email protected]
2. Data we collect
We collect the following categories of data:
2.1 Identification data
- First and last name
- Business email address
- Company name
- Industry
2.2 Payment data
- Billing information (address, VAT)
- Transaction history
Note: card data is processed directly by our provider Stripe and is never stored on our servers.
2.3 Usage data
- Login logs
- Actions performed on the platform
- Credit consumption
- Generated content
2.4 Training corpus
- Uploaded documents (posts, articles, presentations)
- Descriptions of your personas
- Positioning elements (values, promise, differentiation)
- Information about your market
3. Purposes and legal bases
4. Protecting your corpus
We give particular importance to the confidentiality of your documents and business data:
Full isolation
Your corpus is stored in isolation and is never mixed with other clients' data.
No AI training: your data is never used to train or improve our artificial-intelligence models.
Restricted access
Only the personalisation algorithms access your data, with no human intervention.
Deletion on request
You can request the complete deletion of your corpus at any time.
5. Data recipients
Your data may be shared with the following recipients:
5.1 Processors
- Application & database hosting: Scaleway (France)
- AI-model hosting: Microsoft Azure (Paris region, France Central)
- Payments: Stripe (PCI-DSS certified)
- Emailing: Mailjet (Mailgun Technologies SAS)
- Analytics: Google Analytics (Google Ireland Limited) and PostHog (PostHog Inc., hosted in the European Union)
- Error monitoring: Sentry and Bugsnag (diagnosis of technical incidents, with text masked and images blocked in error recordings)
All our processors are bound by contractual clauses guaranteeing the protection of your data in accordance with the GDPR.
5.2 Authorities
Your data may be disclosed to the competent authorities upon legal request (tax administration, judicial authorities).
6. Transfers outside the EU
Some of our processors may be located outside the European Union. In that case, we ensure appropriate safeguards are in place:
- European Commission standard contractual clauses
- European Commission adequacy decision
7. Your rights
Under the GDPR, you have the following rights:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate or incomplete data
- Right to erasure: request the deletion of your data
- Right to restriction: restrict the processing of your data
- Right to portability: receive your data in a structured format
- Right to object: object to certain processing
- Right to withdraw consent: at any time, for processing based on consent
To exercise these rights, contact us at: [email protected]
We will respond to your request within one month. For complex requests, this period may be extended by two months.
8. Security
We implement appropriate technical and organisational measures to protect your data:
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Secure authentication
- Regular backups
- Monitoring and intrusion detection
- Access limited on a need-to-know basis
- Regular security training for our teams
9. Cookies
9.1 Necessary trackers and product usage measurement
This section covers two distinct categories: strictly necessary trackers, which cannot be disabled, and product usage measurement, based on our legitimate interest, which you can object to.
These cookies are necessary for the site to function and cannot be disabled:
- Session cookie
- Authentication cookie
- Language-preference cookie
- Consent cookie (remembering your choices)
Internal usage measurement: apart from these cookies, we record certain technical actions (page viewed, content copied, generation started) on our own servers, using a temporary session identifier. These measurements are not shared with third parties, are only used to improve the product, and are kept for a limited period.
Product usage measurement (PostHog): we use PostHog to understand how our public pages and the application are used and to improve our Services, based on our legitimate interest. Data is hosted in the European Union. We limit collected page addresses, in particular by removing URL query parameters. You can object to this processing at any time by writing to us at [email protected] (see section 7, "Your rights"). More information: posthog.com/privacy
9.2 Audience measurement cookies (Google Analytics)
With your consent, we use Google Analytics to measure the audience of our public website, including the product discovery pages available without an account, and to improve it. It is not loaded inside the application. Data is processed by Google Ireland Limited. More information: policies.google.com/privacy. You can withdraw your consent at any time from the "Manage cookies" link at the bottom of the public pages of the website.
Independently of these trackers, a limited technical recording of the page may be sent to our error-monitoring tool when an error occurs, so that we can fix it. Text is masked and images are blocked.
9.3 Managing cookies
On your first visit, a banner lets you accept or decline audience measurement cookies. You can change your choice at any time via the "Manage cookies" link at the bottom of the public pages of the website. You can also delete or block cookies and site data through your browser settings.
Declining audience measurement cookies does not affect your access to the Services.
10. Minors
BAM's Services are intended for professionals and are not directed at anyone under 18. We do not knowingly collect data concerning minors.
11. Changes
We may update this privacy policy. In the event of a substantial change, we will inform you by email or via a notification on the platform.
12. Contact and complaints
For any question about this policy or your personal data:
Email: [email protected]
Address: BAT B – RDC, 152 Avenue Général Frère, 69008 Lyon, France
If you believe your rights are not being respected, you may lodge a complaint with the CNIL, the French data-protection authority:
Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France