Privacy Policy

Privacy Notice — How Titane Intelligence processes personal data


Version	1.0
Last updated	May 18, 2026
Canonical URL	https://www.titane-intelligence.com/en/legal/privacy

1. Two distinct roles — Read me first

This Privacy Policy explains how SAS TITANE INTELLIGENCE ("Titane," "we") processes personal data. It is essential to distinguish between two very different use cases, in which our legal role under the GDPR is not the same.

1.1 Titane as Controller

When you visit our titane-intelligence.com website, when you contact us by email or through a form, when you are a prospect or a Client point of contact, when you apply for a position, or when you interact with our content (blog article, white paper, event), Titane alone determines the purposes and means of processing your data. In this case, Titane acts as Controller within the meaning of Article 4(7) of the GDPR.

This Privacy Policy covers this use case.

1.2 Titane as Processor

When one of our Clients uses our Services (product recommendation, segmentation, forecasting, trend detection), they transmit pseudonymized data concerning their own customers to us. In this case, Titane acts as Processor within the meaning of Articles 4(8) and 28 of the GDPR, on behalf of the Client, who remains the Controller.

This use case is governed by our Data Processing Agreement (DPA) and is not covered by this Privacy Policy. If you are a data subject affected by processing carried out by one of our Clients, address your request directly to the Client (the merchant with whom you interacted). Titane does not have the technical capability to identify you within its systems — see Article 6 of the DPA for technical details.

2. Identity of the Controller

SAS TITANE INTELLIGENCE Société par actions simplifiée with a share capital of €1,000 SIREN: 105 840 060 Registered office: 51 rue Villedieu, 33000 BORDEAUX, France Represented by: Théo Lapouge, President

General contact: privacy@titane-intelligence.com

3. Data Protection Officer (DPO)

Titane has appointed Mr. Théo Lapouge as Data Protection Officer (DPO).

DPO contact: dpo@titane-intelligence.com

You may write to the DPO with any question relating to the processing of your data, the exercise of your rights, or any concern regarding the protection of your privacy.

4. Data collected

We collect the following categories of data, depending on your interaction with Titane:

4.1 Contact data

Last name, first name, job title, company name, business email address, business phone number.

4.2 Account data (Client users)

4.3 Communication data

Email content, support requests, exchanges via contact forms, transcripts of demos and meetings.

4.4 Browsing and technical data

Pages viewed on titane-intelligence.com, visit duration, traffic source, IP address, device type, browser, operating system, cookies (see our Cookie Policy).

4.5 Prospecting data

Publicly accessible professional data (LinkedIn, company websites), data obtained through partners (agencies, integrators), data collected through professional events.

4.6 Recruitment data

Résumé, cover letter, professional background, data from interviews, professional references (when you apply for a position).

4.7 Billing data

Billing details, information relating to the Client Account, amounts invoiced, payment history, accounting records.

5. Data sources

Directly from you: when you fill out a form, create an account, communicate with us by email, apply for a position, or speak with us at an event.
Automatically: when you browse our website or use our Services (cookies, technical logs).
Third parties: public professional sources (LinkedIn, company websites), partners and business introducers, legal and professional registers.

6. Purposes of processing

Purpose	Categories of data	Legal basis (Article 6 GDPR)
Provision of the Service and Account management	Account data, contact data, technical data	Performance of the Subscription Agreement (Art. 6(1)(b))
Technical and functional support	Communication data, account data	Performance of the Agreement (Art. 6(1)(b))
Billing and accounting	Billing data, contact data	Performance of the Agreement (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c))
B2B commercial prospecting	Prospecting data, contact data	Legitimate interest (Art. 6(1)(f)) — professional prospecting consistent with the CNIL's position on B2B
Marketing communication and newsletter	Contact data	Consent (Art. 6(1)(a)) or legitimate interest, as applicable
Service improvement and statistics	Technical data, aggregated account data	Legitimate interest (Art. 6(1)(f))
Security and fraud prevention	Technical data, access logs	Legitimate interest (Art. 6(1)(f))
Recruitment	Recruitment data	Pre-contractual measures (Art. 6(1)(b)) or consent (Art. 6(1)(a))
Compliance with legal obligations	Depending on the nature of the obligation	Legal obligation (Art. 6(1)(c))
Defense of legal claims	Any relevant data	Legitimate interest (Art. 6(1)(f))

7. Data recipients

The personal data collected may be disclosed to the following recipients:

Authorized Titane personnel: sales, support, technical, accounting, and management teams, subject to confidentiality obligations.
Sub-Processors: see the public list for the service providers used (hosting, technical services, etc.).
Advisors and attorneys: to the extent necessary to defend our interests or to comply with a legal obligation.
Public authorities: upon legitimate judicial or administrative request.

Titane does not sell or rent your data to third parties for commercial purposes.

8. Transfers outside the European Union

Some of our Sub-Processors may process data outside the European Economic Area, in particular in the United States.

Any transfer outside the EU is governed by the mechanisms provided for in Articles 44 to 49 of the GDPR, in particular:

the Standard Contractual Clauses (SCCs) adopted by Implementing Decision (EU) 2021/914;
where applicable, the recipient's participation in the EU–United States Data Privacy Framework (DPF);
any applicable adequacy decision.

The detailed list of Sub-Processors and their locations is available at https://www.titane-intelligence.com/en/legal/subprocessors.

9. Retention periods

Category	Period
Prospects (without an active business relationship)	3 years from the last contact
Clients (during the term of the Agreement)	Term of the Agreement
Clients (after termination)	5 years for accounting and legal obligations
Invoices and accounting records	10 years (Article L. 123-22 of the French Commercial Code)
Data of unsuccessful candidates	2 years from the last contact, unless consent is given for longer retention
Cookies that are not strictly necessary	13 months maximum (CNIL recommendations)
Access and security logs	12 months
Email communications with clients/prospects	5 years from the last exchange

At the end of the retention period, data is deleted or irreversibly anonymized.

10. Security

Titane implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk (Article 32 GDPR).

The details of the measures applied are available on our Security page: https://www.titane-intelligence.com/en/security.

These measures include, in particular:

encryption at rest (AES-256, AWS KMS, separate keys per client) and in transit (TLS 1.3);
strict access control, hardware multi-factor authentication for administrators;
exclusive hosting in the European Union (AWS Paris, eu-west-3);
a Zero Local Data policy;
logging, monitoring, and incident management with notification to the Client in less than 12 hours.

11. Your rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

Right of access (Art. 15): obtain confirmation that processing concerning you is being carried out and receive a copy of it.
Right to rectification (Art. 16): obtain the correction of inaccurate or incomplete data.
Right to erasure (Art. 17): obtain the erasure of your data in the cases provided for by the GDPR.
Right to restriction (Art. 18): obtain the restriction of processing in the cases provided for.
Right to data portability (Art. 20): receive your data in a structured, commonly used, and machine-readable format.
Right to object (Art. 21): object to processing based on legitimate interest or intended for prospecting.
Right to withdraw consent: at any time, where processing is based on consent.
Right to set post-mortem directives regarding the fate of your data after your death (Article 85 of the French Data Protection Act).
Right not to be subject to an automated individual decision (Art. 22).

12. How to exercise your rights

To exercise any of your rights, write to:

privacy@titane-intelligence.com (general GDPR requests)
dpo@titane-intelligence.com (DPO)

Please include anything that allows us to verify your identity (in the event of reasonable doubt). We respond within one (1) month of receiving your request, which may be extended by two (2) months in the case of a complex request (Article 12(3) GDPR).

13. Cookies

The use of cookies on titane-intelligence.com is governed by our Cookie Policy. You may set your preferences at any time via the consent banner displayed on the website.

14. Complaint to the CNIL

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL) 3, place de Fontenoy — TSA 80715 — 75334 PARIS CEDEX 07 Website: https://www.cnil.fr

We nevertheless encourage you to contact us first so that we can try to resolve your concern directly.

15. Changes to the Privacy Policy

Titane reserves the right to modify this Privacy Policy, in particular to reflect legal, regulatory, or operational developments. Any material change will be notified at least thirty (30) days before it takes effect, by email to registered Clients or by visible publication on the website.

The date of the last update is indicated at the top of this document. Previous versions are archived and available upon request at privacy@titane-intelligence.com.

Contacts: privacy@titane-intelligence.com · dpo@titane-intelligence.com

Version 1.0 — Last updated: May 18, 2026