Your data remains yours. Here is precisely what we do with it, where, and who handles it.

Who processes your data

AI Innovation Box is published by iasagora (SAS), SIREN 891 868 010, whose registered office is at 6 rue des Écoles, 75005 Paris, France. iasagora is the data controller within the meaning of the GDPR.

What data we collect

• Your email address, work or personal, to send you a single-use login link. No password is ever requested or stored.
• The content of your workshops: the challenge you formulate, the ideas produced, the concepts enriched and evaluated during a session.
• Your billing data, if you are a subscriber: your card details are entered and stored directly by Stripe, never by us.
• Limited technical logs: login timestamps, usage events (which tier, which technique), server errors. No advertising trackers, no resale to third parties.

Why we collect it

Solely to run the service: authenticate you without a password, run the innovation techniques on your challenge, bill your subscription if you have one, alert you if something goes wrong, and improve the product. Nothing more.

How AI handles your data

The content of your workshops is sent to the Claude models, developed by Anthropic, to generate, enrich and evaluate ideas. Anthropic does not train its models on data sent through its business API: it is used only to produce your response, not to improve the model for other customers.

Where your data is hosted

The application and the database that store your account and workshops are hosted by OVH, in Strasbourg (France). Your stored data never leaves the European Union.

Who else has access

Each provider only accesses what is strictly necessary for its role:

• Anthropic: AI generation of ideas and concepts.
• Resend: sending the emails containing your login link.
• Stripe: payment processing, if you are a subscriber.
• OVH: hosting of the server and database, in Strasbourg.
• Google: website audience measurement (Analytics) and campaign measurement (Ads), only with your consent.

How long we keep it

Your account and workshop data are kept as long as your account exists. Single-use login links expire after 15 minutes and are deleted from the database after one day, whether used or not. On simple request, your account and the associated data are deleted.

Security

No password to protect: you log in with a single-use link, of which only a fingerprint (hash) is stored, never the link itself. Exchanges between your browser and our servers are encrypted (HTTPS). Each account is compartmentalized: nobody can see another account's workshops.

Cookies

This site uses two Google tools, only if you accept them in the banner shown on your first visit: Google Analytics, to measure audience (page views, where visits come from, forms submitted), and Google Ads, to know which advertising campaigns lead to trial or demo requests. Until you have made a choice, or if you decline, no cookie is set and nothing is sent to Google. Your choice is remembered for six months in your browser, and you can change it at any time via the “Manage my cookies” link at the bottom of every page. Audience measurement data is kept for 14 months, Google cookies for at most 13 months. The videos on the Product page are hosted on YouTube: they only load after you click the play button, and only then does Google receive your IP address and apply its own privacy policy. The application itself sets a single cookie, strictly necessary to keep you logged in.

Your rights

In accordance with the GDPR, you have the right to access, rectify, erase, port and object to the processing of your data. To exercise these rights, write to confidentialite@ai-innovation-box.com. You may also lodge a complaint with the CNIL, the French data protection authority.