Personal data
Privacy policy
When you contact ICBeye, talk with Arame or sign up for our newsletter, we keep the information needed to handle your request, respect your choices and secure the service.
Cookie-free aggregate statistics
We count requests for public pages using a dedicated server log, without cookies or individual identifiers. This log contains no visitor IP addresses, session identifiers, form content or URL parameters. Referrers are grouped into broad categories. These data are retained for 30 days and the statistics are available only to administrators.
This count remains active if you refuse Google Analytics. It cannot identify a person or link browsing activity to a CRM enquiry. Known bots and technical requests are filtered.
Google Analytics audience measurement
Audience measurement on public pages starts only after you agree in the cookie banner. It sends Google page URLs without query parameters or fragments, predefined actions and technical information needed for measurement. CRM data, contact details and the text of your enquiries or conversations are excluded from this integration. No advertising features or Google Signals are enabled.
You can refuse without losing access to the website and withdraw your agreement using “Manage cookies” in the footer. The cookie policy explains how this works and the browser retention settings.
Data collected
The form may collect your name, company, email, optional phone number, country, business sector, current tools, intended users, project type, optional budget and timeline, message, language, the page where the request started and the date of your consent.
Conversations with Arame, our AI assistant
When you start a conversation, your initial need, messages, questions and answers, corrections and evolving qualification report are saved in our private workspace, including when the conversation is interrupted. The report may contain AI inferences that our team must validate.
Relevant conversation content is sent to OpenAI through its API to generate Arame’s replies. This processing uses the retention settings applicable to the OpenAI service; do not include passwords, access keys or sensitive information unrelated to your request. The private log’s technical metadata is not sent to the model.
Technical conversation records
A necessary cookie links the conversation to your session. A private log records dates, request identifiers, the observed IP address, the declared browser, the calling site’s origin, request outcomes, tool calls and report versions. Referring URLs are reduced to their origin without query parameters. These records support follow-up, diagnostics and abuse prevention; they do not prove the visitor’s identity. Access cookies, password fields and authentication headers are not copied into this log.
Why we use it
The data allows us to read and answer your request, prepare a possible conversation, qualify the business need and protect the service from abuse. It is never sold or used to build advertising lists.
Newsletter subscription
If you sign up for the newsletter, we record your email address, chosen language and evidence of your choice: the date, consent text shown and its version, followed by confirmation or withdrawal events. We use this information to manage your subscription and respect your preferences.
We send you a confirmation email. Your subscription is activated only after you explicitly confirm on the dedicated page. You can then stop future emails using the unsubscribe link included in them.
Unconfirmed requests are purged after seven days. A blocking fingerprint, separate from message content, is retained to respect an unsubscribe request, permanent delivery rejection or spam complaint and prevent further unwanted emails.
Retention
Contact requests and their conversation content are kept for as long as needed to handle them, then for no more than three years so that a professional conversation can be resumed. Technical log metadata, including the IP and declared browser, is removed after the configured period, which defaults to 90 days. Request content that is not attached to a file is also erased after the business retention period.
Hashes without content may remain to check continuity in a session still attached to other files. They no longer allow erased conversations to be read. Expired sessions without a file or recent event are deleted with their hashes after the business retention period, which defaults to three years after expiration.
Who can access it
Access is limited to the people handling your request and the technical providers required to operate the service securely. We take reasonable steps to prevent unauthorized access, loss or disclosure.
Resend sends application emails, confirmation emails and newsletters. Google Workspace is used for business email. OpenAI generates Arame’s replies, and Cloudflare Turnstile provides bot protection, as described on this page.
Protection against bots
Cloudflare Turnstile protects form submissions and access to our contact details. Verification processes technical information about the browser and network, including the IP address. The content of your request is not sent to Cloudflare for this verification.
Your rights
Depending on the law that applies, you may request access, correction, deletion, restriction or objection to the use of your data. Use our contact form or reveal our email below to make a request. You may also contact the relevant data-protection authority.