CoAct

Privacy Policy

CoAct places great importance on protecting your personal data. This policy describes what data is collected on coact.fr, why, how long it is retained, and what your rights are.

Data Controller

CoAct SAS — Frédéric Le Pennec (full contact details in the legal notices). Contact for any questions regarding your data: frederic@coact.fr.

Data Collected and Purposes

Contact Form

The information you provide (name, professional email, company, message) is used solely to respond to your request and, if necessary, to discuss your situation. Legal basis: pre-contractual measures and legitimate interest.

Onboarding Diagnostic

The responses to the questionnaire, information about your organization, and your email address are used to calculate your score, generate a personalized analysis, and send it to you via email in PDF format. To produce this analysis, your responses are transmitted to an artificial intelligence provider (OpenAI, Anthropic, or Google depending on the site configuration), who acts as a subcontractor and does not retain this data to train its models. Legal basis: pre-contractual measures requested by you.

Appointment Booking (TidyCal)

Booking a time slot is done via the TidyCal tool, integrated on the contact page. The information entered in this module is processed by TidyCal according to its own privacy policy.

Resource Assistant (AI)

Questions posed to the assistant on the Resources page are transmitted to the artificial intelligence provider to generate a response from published articles. They are also recorded anonymously for statistical purposes (most frequently asked questions). Avoid entering personal or confidential information there.

Audience Measurement

With your consent, the site measures its traffic with an internal tool, without cookies: pages visited, reading depth, language, device type, and approximate geographic location. Your IP address is never stored in clear text: it is immediately transformed into a pseudonymous identifier (encrypted fingerprint). For approximate location and VPN detection, the IP address is temporarily transmitted to the service proxycheck.io, without being retained afterward.

Site Administration

A strictly necessary technical cookie maintains the session of site administrators.

Recipients and Subcontractors

Your data is intended for CoAct. It may pass through the following service providers, strictly within the limits of their mission: the site host (to be completed), Resend (email sending), the artificial intelligence provider (analysis generation), proxycheck.io (approximate geolocation), and TidyCal (appointment booking). Some of these providers being located outside the European Union, data transfers may occur, governed by the guarantees provided by the GDPR (standard contractual clauses).

Retention Periods

  • Contact requests: 3 years from the last exchange.
  • Diagnostics and reports: 3 years.
  • Audience measurement: 13 months maximum.
  • Assistant questions: anonymous statistics without time limit.

Your Rights

You have the right to access, rectify, delete, restrict, and object to the processing of your data, as well as the right to withdraw your consent at any time (audience measurement). To exercise them: frederic@coact.fr.

If you believe your rights are not being respected, you can contact the CNIL: www.cnil.fr.

Security

Exchanges with the site are encrypted (HTTPS), admin accesses are protected, and IP addresses are never stored in clear text.

This policy may be updated. Last revision: July 2026.

Privacy Policy · CoAct