Privacy Policy

1. Introduction

AtomFlow ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and contact form.

This policy complies with the EU General Data Protection Regulation (GDPR) and applies to all visitors and users of our website.

2. Data Controller

The data controller responsible for your personal data is:

3. What Personal Data We Collect

We only collect personal data that you voluntarily provide to us through our contact form:

• Name: To address you properly in our communications
• Email address: To respond to your inquiries
• Organization: (Optional) To understand your professional context
• Message content: To understand and respond to your inquiry

We do not use cookies for tracking or analytics purposes. We do not collect any personal data automatically through your use of our website.

4. Legal Basis for Processing

We process your personal data based on your explicit consent, which you provide when submitting the contact form. The processing is necessary to respond to your inquiry and establish potential business communications (legitimate interest under Article 6(1)(f) GDPR).

5. How We Use Your Data

We use your personal data solely for the following purposes:

• To respond to your inquiries and questions
• To communicate with you about our services
• To maintain records of our communications for business purposes

We do not use your data for marketing purposes without your separate explicit consent. We do not sell, rent, or share your personal data with third parties for their marketing purposes.

6. Third-Party Service Providers

We use the following third-party service providers to process your data:

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: Retained in our email system until you request deletion or for up to 2 years from the date of last communication, whichever comes first
• Server logs: Automatically deleted by Vercel according to their retention policies (typically 30 days)

9. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data
• Right to Restriction: Request limitation of processing of your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw your consent at any time without affecting prior processing
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us at:

Email: contact@atomflow.fr

We will respond to your request within 30 days as required by GDPR.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• HTTPS/TLS encryption for all data transmission
• Secure API endpoints with input validation
• Regular security updates and monitoring
• Access controls and authentication for our systems
• Security headers to protect against common web vulnerabilities

11. Cookies

Our website uses only essential cookies necessary for the cookie consent banner functionality. We do not use tracking cookies, analytics cookies, or marketing cookies. We do not use third-party cookies for advertising or behavioral tracking.

12. Children's Privacy

Our website is not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when this policy was last revised. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact us:

15. Supervisory Authority

If you are located in the European Economic Area and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority. A list of supervisory authorities can be found at:

https://edpb.europa.eu/about-edpb/about-edpb/members_en