NovaQuantiX
Back to home
Legal

Privacy Policy

Last updated: May 30, 2026

This Privacy Policy describes how NovaQuantiX ("we", "us") collects, uses, stores, and shares personal data through the website novaquantix.tech, its booking system, its NOVA chatbot, and the contractual relationships we form with our clients and their representatives.

We comply with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") and the French Loi Informatique et Libertés (modified 2018).

1 · Data controller

The data controller is NovaQuantiX, represented by Julien Compain, Founder.

2 · Personal data we collect

2.1 Data you provide directly

  • Contact form & e-mail. Your name, professional e-mail, company, role, and the content of your message.
  • Booking system (Cal.com). Your name, e-mail, and the information you choose to include in the booking note. Cal.com is processed by Cal.com Inc. as an independent sub-processor (see section 6).
  • Chatbot (NOVA). The content of your conversation, your browser locale, and a session-level identifier in memory only. We do not store chatbot conversations server-side beyond the time required to stream the response.
  • Engagement data. Information provided during a commercial relationship: contract details, technical inputs, deliverables history.

2.2 Data collected automatically

  • Server logs. IP address, user agent, requested URL, status code, timestamp. These logs are kept for security and troubleshooting.
  • Strictly necessary cookies / local storage. Used for locale preference and CSRF protection. No third-party advertising or tracking cookies are set.

2.3 Data we do not collect

We do not use third-party advertising trackers, fingerprinting, Google Analytics, Meta Pixel, or any cross-site profiling tool. No marketing emails are sent without explicit prior consent.

3 · Purposes of processing

  • Reply to inbound inquiries and prepare commercial proposals.
  • Schedule and conduct discovery calls.
  • Provide chatbot answers about NovaQuantiX services.
  • Execute, document, and invoice consulting engagements.
  • Comply with our legal obligations (accounting, tax, archiving).
  • Detect and prevent fraud, abuse, and security incidents.

4 · Legal bases (GDPR Article 6)

  • Pre-contractual measures and contract performance (Art. 6.1.b) for any data processed to answer a request, prepare a quote, sign an SOW, or deliver work.
  • Legitimate interest (Art. 6.1.f) for security logs, fraud prevention, and chatbot session management.
  • Consent (Art. 6.1.a) for any optional communication (newsletter, follow-up content).
  • Legal obligation (Art. 6.1.c) for accounting records and tax archiving.

5 · Retention periods

  • Inquiries without follow-up: deleted within 12 months.
  • Active commercial leads: kept while the relationship is active, then 3 years from the last contact.
  • Executed contracts & invoices: 10 years (French Commercial Code, accounting requirement).
  • Server logs: 12 months.
  • Chatbot session memory: ephemeral — discarded at the end of the streaming response. We do not write conversation history to disk.
  • Booking data (Cal.com): retained by Cal.com per their own policy; we delete our copy 24 months after the event.

6 · Recipients & sub-processors

Your data may be shared with the following sub-processors, each bound by appropriate contractual safeguards (Article 28 GDPR Data Processing Agreement) and the EU Standard Contractual Clauses where applicable:

  • Vercel Inc. — website hosting and edge delivery (USA, with EU-based regions; SCCs in place).
  • NVIDIA Corporation (NVIDIA NIM) — LLM inference for the NOVA chatbot (USA; conversation content is streamed, not persisted by us; NVIDIA terms apply).
  • Cal.com Inc. — booking system (USA / EU; their privacy policy applies in parallel).
  • GitHub Inc. — source code repositories (where applicable to your engagement).
  • French and EU accounting / legal partners — under professional confidentiality obligations.

We do not sell, rent, or trade personal data. We disclose data only when required by law, court order, or to defend our legal rights.

7 · International transfers

Some sub-processors are located outside the European Economic Area (notably the United States). For every such transfer we rely on appropriate safeguards: adequacy decisions, EU Standard Contractual Clauses (Module 2 or 3 as applicable), and additional technical measures (encryption in transit and at rest, data minimisation).

8 · Your rights

Under GDPR Articles 15 to 22 you have the right to:

  • Access your personal data and obtain a copy.
  • Rectify inaccurate or incomplete data.
  • Erase your data ("right to be forgotten"), subject to legal retention obligations.
  • Restrict processing.
  • Object to processing based on legitimate interest.
  • Receive your data in a portable format.
  • Withdraw consent at any time for consent-based processing.
  • Define directives on the fate of your data after your death.

To exercise any of these rights, write to privacy@novaquantix.tech. We respond within one month (extendable by two months for complex requests). You may also lodge a complaint with the French data protection authority, CNIL.

9 · Cookies & local storage

We use the minimum technical storage necessary to operate the website: a locale preference cookie (no expiry, removable from your browser settings) and a session-only identifier for the chatbot. No advertising, analytics, or profiling cookie is set without your explicit consent.

10 · Security measures

  • HTTPS / TLS 1.3 enforced on every endpoint.
  • Ed25519-signed build artifacts and Merkle-chained audit logs.
  • Secret management via environment variables, never committed.
  • Least-privilege access on every sub-processor account, with periodic rotation.
  • Documented incident-response procedure (see Security).

11 · Children

The website and our services are intended for professional clients and are not directed at children under 16. We do not knowingly collect personal data from minors.

12 · Updates to this policy

We may update this Privacy Policy to reflect changes in our services or applicable law. The "Last updated" date at the top of the page indicates the latest revision. Material changes will be notified by email to active contractual partners.

13 · Contact

Privacy and data-protection requests: privacy@novaquantix.tech. General enquiries: contact@novaquantix.tech.