CARTANOLegal
Privacy policy
Version of 25 October 2026.
Courtesy translation. In case of any discrepancy, only the French version is authoritative.
In short
This site sets no analytics or advertising cookies. There is no banner to click because there is nothing to accept. Only two third-party services: Cloudflare's anti-bot check, on the trial and contact forms only, and the booking calendar, which loads only if you click to display it.
Data controller
Ecobeez Consulting — 4 bis rue du Bel Air, 95560 Montsoult, France.
Contact: contact@ecobeez.fr.
On the public site
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Name, company, email, message sent through the form | Answering your request | Pre-contractual measures | 3 years after the last exchange |
| Web server logs (IP address, page, timestamp) | Security and diagnosis | Legitimate interest | 12 months |
| Browser technical signals and IP address, read by the anti-bot check | Tell a human from a bot on the trial and contact forms | Legitimate interest (security) | Not kept by us; per Cloudflare's policy |
| Slot booked through Calendly | Arranging the meeting | Pre-contractual measures | Per Calendly's policy |
The contact form sends your request to our server, which emails you a confirmation link: nothing reaches us until you click it, and nothing is stored in the meantime. The calendar is provided by Calendly LLC; its loading is deferred until your click, at which point it sets its own cookies, governed by its own policy.
In the service
Access to the studio goes through single sign-on on the Centaur Cortex platform, published by Ecobeez Consulting. The log records who changed what and when: these traces are tamper-proof by design — that is what makes them worth having — and disappear with the workspace when it is deleted.
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Email, first and last name | Open and secure your access | Performance of the contract | Duration of access, then deleted with the workspace |
| Activity log (who changed what, when) | Audit and undo | Performance of the contract | Life of the workspace |
| Trial request (email, organisation) | Check your address before opening the workspace | Pre-contractual measures | Nothing is kept until the link is confirmed; the link expires after 30 minutes |
| Billing data (company name, address, VAT number, invoices) | Invoice the subscription | Legal obligation | 10 years (article L. 123-22 of the French commercial code) |
Your email is required: without it, no access can be opened. Database backups are kept for fourteen (14) days, then erased.
The models, repositories and documents you put in belong to you. They are not analysed for commercial purposes, not used to train a model, and not shared with third parties.
Agent workshop
When you launch a modelling agent, the brief you write and the content of the document concerned are sent to the language model provider to produce the draft. No other content of your workspace is sent. If your workspace uses its own key, your contract with that provider applies. If you would rather nothing left, the workshop can stay disabled — the rest of the product works without it.
Sub-processors
| Provider | Role | Location |
|---|---|---|
| OVH SAS | Hosting of the site, the service and the backups | France |
| Brevo (Sendinblue SAS) | Sending emails (confirmations, invitations) | France |
| Anthropic PBC | Language model of the agent workshop, if enabled | United States |
| Cloudflare, Inc. | Anti-bot check (Turnstile), trial and contact forms | United States |
| Calendly LLC | Appointment booking, if you display it | United States |
Transfers to the United States are covered by the safeguards the GDPR provides — the EU–US Data Privacy Framework or the European Commission's standard contractual clauses, depending on the provider. No data protection officer is appointed; write to us at the address below.
Your rights
You have a right of access, rectification, erasure, restriction, objection and portability. Portability is immediate and requires no request: the complete export of the workspace is a function of the product.
To exercise your rights: contact@ecobeez.fr. You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
Security
Encryption in transit (TLS), isolation between workspaces guaranteed by the database itself and not by application code, append-only audit log, administrative access separated from application access.