Privacy policy

Last updated: 24 October 2026. The French version is the reference text.

The personal data processed by the ekera.ai website and our business exchanges, why, for how long, and how to exercise your rights.

In short

No advertising cookies, no trackers, no audience measurement: that is why no banner is shown.
Your data is used only to reply to you or, for the newsletter, to send it to you; it is never sold or transferred.
The site is hosted in France; no data is transferred outside the European Union.
To exercise your rights: contact@ekera.ai, reply within one month.

Who is responsible for your data

The data controller is Exiane, a French limited liability company (société à responsabilité limitée) with a share capital of €1,000, registered under SIREN number 918 202 557 with the Lorient trade and companies register, whose registered office is at 66 rue des Quatre Vents, 56170 Quiberon, France.

Ekera AI is a project run by Exiane pending the registration of the company Ekera AI, which will take over the site; this page will then be updated.

For any question about your data: contact@ekera.ai. Other legal information is in the legal notice (in French).

What we process, and why

This page covers the ekera.ai website and our business exchanges. Data you entrust to Ekera during an assessment is processed under the contract agreed with you; see also Security and sovereignty.

Assessment requests and contact

How it works: the form on the Request an assessment page sends nothing from the site; it prepares an e-mail in your mail client, which you choose to send to contact@ekera.ai. You can also write to us directly.
Data: name, company, e-mail address, reason for the request and, if you wish, a message. The first three are needed to reply to you; the message is optional.
Purpose: reply to your request, arrange the first call and, if you wish, prepare a proposal.
Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
Retention: 3 years from our last exchange if no business relationship follows; if a contract is signed, the length of the business relationship, then the period required by law (for example ten years for accounting records).

Business-to-business prospecting e-mails

Data: name, job title, company and business contact details.
Source: you, during an exchange, or publicly available business sources, such as your company’s website.
Purpose: introduce Ekera when the offer relates to your role.
Legal basis: our legitimate interest in making our services known to professionals (Article 6(1)(f) GDPR).
Objection: each e-mail explains how to stop receiving them; an e-mail to contact@ekera.ai is enough, and sending stops immediately.
Retention: 3 years from your last contact, without exchange; if you object, only your address is kept, on an objection list, so that we no longer write to you.

Site visits and audience statistics

Audience measurement: none. This site uses no audience measurement tool and does not track your browsing.
Technical logs: like any web server, the host’s server records the IP address, the page requested, the date and time, and the browser type. These logs serve the security and proper operation of the site, which is our legitimate interest (Article 6(1)(f) GDPR), never audience measurement.
No third parties: fonts, images and videos are served by ekera.ai; no page loads a resource from another service that would receive your IP address.

Calculator and guided tours

The calculator on the Savings and productivity page and the guided tours (workspace, assessment, in French) run entirely in your browser: what you enter there is neither sent nor stored.

Who receives your data

Only the Ekera team, within Exiane, has access to it. Your data is never sold, transferred or rented.
Processors: OVH SAS, 2 rue Kellermann, 59100 Roubaix, France, the site’s host, whose servers are located in France; the e-mail service that receives messages sent to contact@ekera.ai; once open, the newsletter’s mailing tool.
Administrative or judicial authorities, only when required by law.

Transfers outside the European Union

No data is transferred outside the European Union.

Cookies and trackers

This site sets no advertising cookies and no trackers that require consent; that is why no banner is shown.

In fact it sets no cookies at all, stores nothing in your browser and embeds no third-party content (social network, video, map, font) that could set them. Article 82 of the French Data Protection Act therefore requires no consent. Should an audience measurement tool or a third-party service be added, this page would be updated first, and your consent would be requested where the law requires it.

Your GDPR rights

For data relating to you, you have the following rights:

access: know what data we hold and obtain a copy;
rectification: have inaccurate or incomplete data corrected;
erasure: have your data deleted, unless the law requires us to keep it;
restriction: have the use of your data temporarily frozen;
objection: object to processing based on our legitimate interest, and at any time, without giving a reason, to prospecting;
portability: receive, in a machine-readable format, the data provided on the basis of your consent or a contract;
withdrawal of consent: at any time, for the newsletter;
post-mortem instructions: decide what happens to your data after your death (Article 85 of the French Data Protection Act).

How to exercise them: write to contact@ekera.ai, stating the right you are exercising. We reply within one month of receipt; this period may be extended by two months for a complex request, in which case we tell you within the first month. Proof of identity is requested only if there is reasonable doubt about your identity.

Complaint: if you believe your rights are not respected, you can lodge a complaint with the French data protection authority (CNIL), at cnil.fr.

No decision based solely on automated processing, and no profiling, is made from your data.

Data security

The site is served over HTTPS only, with no third-party scripts, under a content security policy that allows only the site’s own scripts. For Ekera’s security measures, see Security and sovereignty.

Updates to this page

Last updated: 24 October 2026. Any significant change will be dated here.