Privacy Policy

Personal information

• Account information: name, email address, company name, job title
• Contact details: billing address, phone number
• Authentication data: encrypted passwords, OAuth tokens
• Communication preferences and marketing consents

Platform data

When you connect your email marketing platforms (such as Klaviyo), we collect:

• Email campaign performance metrics and analytics
• Audience segmentation data and demographics
• Email content and design templates (processed by our AI)
• Integration settings and API configurations

Usage and technical data

• Device information: IP address, browser type, operating system
• Usage patterns: pages visited, features used, session duration
• Cookies and similar tracking technologies
• Error logs and performance data

• Provide AI-powered email marketing optimization and analytics
• Generate personalized recommendations and insights
• Process and analyze your email marketing data
• Facilitate integrations with third-party platforms

AI model training and improvement

We use aggregated and anonymized data to improve our AI algorithms and machine learning models. Personal identifiers are removed, and data is processed in compliance with data protection regulations.

Legal basis (GDPR)

• Contractual necessity: to provide our services as outlined in our Terms of Service
• Legitimate interests: to improve our platform, prevent fraud, and ensure security
• Consent: for marketing communications and non-essential cookies
• Legal obligations: to comply with applicable laws and regulations

Your data is primarily processed and stored within the European Union. When data is transferred outside the EU (such as to our AI processing partners), we ensure adequate protection through Standard Contractual Clauses (SCCs), adequacy decisions by the European Commission, and certified data processing frameworks.

• Encryption for data in transit and at rest
• Multi-factor authentication and access controls
• Regular security reviews
• GDPR-compliant data processing agreements with vendors

We do not sell or rent your personal data. We may share data with:

• Service providers: cloud hosting, AI processing, payment processing (all under data processing agreements)
• Email platforms: Klaviyo and other integrated platforms, as authorized by you
• Legal compliance: when required by law or to protect our rights
• Business transfers: in case of merger, acquisition, or sale

• Essential cookies: required for platform functionality
• Analytics cookies: to understand usage and improve performance
• Marketing cookies: for personalized advertising, with your consent

You can manage cookie preferences through your browser settings.

• Access: request a copy of your personal data
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your data (right to be forgotten)
• Portability: receive your data in a structured, machine-readable format
• Restriction: limit how we process your data
• Objection: object to processing based on legitimate interests
• Withdraw consent: for processing based on consent

To exercise these rights, contact us at support@ypsometro.ai.

• Account data: until account deletion + 30 days
• Platform data: 3 years after last platform activity
• Analytics data: anonymized after 2 years
• Legal compliance: as required by applicable law (typically 5-7 years for financial records)

Ypsómetro AI is headquartered in France and primarily processes data within the EU. When we transfer data internationally, we ensure adequate protection through appropriate safeguards as required by GDPR and French data protection law (Loi Informatique et Libertés).

Our services are designed for business use and are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16.

We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify you of material changes at least 30 days before they take effect.

Data Controller: Ypsómetro AI

Email: support@ypsometro.ai

Supervisory Authority: Commission Nationale de l'Informatique et des Libertés (CNIL) — www.cnil.fr