'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_239_73'%20x1='296'%20y1='0'%20x2='168'%20y2='144'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20offset='0.255208'%20stop-color='%2300AFFE'/%3e%3cstop%20offset='0.770833'%20stop-color='%2300F8B6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e)
Privacy Policy
Last updated: 17 September 2026
Prescient SAS ("Prescient", "we", "us") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect through the website prescient.studio (the "Site") and in the course of our commercial relationships, why we collect it, the legal bases we rely on, who we share it with, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
This policy covers visitors to the Site, prospects, and business contacts. It does not cover the processing we carry out on behalf of our clients as a processor in the course of our services; that processing is governed by the data processing agreement (DPA) signed with each client.
1. Data controller
The data controller for the processing described here is:
Prescient SAS, 60 rue François 1er, 75008 Paris, France. 980 002 588 R.C.S. Paris.
- Privacy contact: marketing@prescient.studio
- Internal data protection contact: Pierrick Nonnis, pierrick@prescient.studio
2. What data we collect
We collect only the data we need, for the purposes set out in Section 3.
| Category | Examples | Source |
|---|---|---|
| Identification & contact | First and last name, professional email, phone, company, job title | Provided by you (contact form, email, meetings) |
| Message content | The content of your enquiry or correspondence | Provided by you |
| Commercial relationship | Exchanges, proposals, consent records, satisfaction-survey responses | Generated in our relationship / provided by you |
| Demo access | First and last name, professional email, phone number, and the date your number was verified | Provided by you when you request access to the Prescient App demo |
| Assistant conversations | The questions you type into the assistant on our home page and its answers | Provided by you |
| Technical & usage | IP address, browser user agent, and server logs generated when you load a page or call one of our forms | Collected automatically by our host and our own serverless functions (see Section 5) |
We do not intentionally collect special-category data (health, political opinions, etc.). Please do not include such data in messages to us.
3. Purposes and legal bases
We process personal data only where we have a legal basis under Article 6 GDPR.
| Purpose | Legal basis |
|---|---|
| Responding to your enquiries and requests | Pre-contractual measures at your request (Art. 6(1)(b)) and/or our legitimate interest in answering (Art. 6(1)(f)) |
| Managing the commercial relationship and providing our services | Performance of a contract (Art. 6(1)(b)) |
| B2B commercial prospecting (emails to professional contacts about services related to their role) | Our legitimate interest (Art. 6(1)(f)), with an opt-out offered at collection and in every message |
| Sending marketing communications to individuals / non-professional contacts | Your consent (Art. 6(1)(a)) |
| Giving you access to the Prescient App demo, including verifying your phone number by SMS | Pre-contractual measures at your request (Art. 6(1)(b)) and our legitimate interest in qualifying demo requests (Art. 6(1)(f)) |
| Answering your questions through the assistant on our home page | Our legitimate interest in answering visitors (Art. 6(1)(f)) |
| Site security and fraud prevention | Our legitimate interest in securing the Site (Art. 6(1)(f)) |
| Complying with legal, accounting, and tax obligations | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interest, you have the right to object (see Section 9). Where we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
Providing your data is not a statutory requirement, but if you do not provide the identification and contact data marked as required in a form, we may be unable to respond to your request.
4. Data we do not use for automated decisions
We do not make decisions producing legal or similarly significant effects about visitors, prospects, or contacts based solely on automated processing, including profiling, within the meaning of Article 22 GDPR.
5. Cookies and similar technologies
The Site does not use analytics cookies, advertising cookies, or any tracking pixel. We do not run Google Analytics, Meta Pixel, LinkedIn Insight Tag, or any comparable tool on the Site, and we do not build advertising profiles from your visit. Because we place no non-essential tracker, no consent banner is displayed.
What is stored on your device:
| Cookie / storage | Purpose | Category | Duration |
|---|---|---|---|
pa_demo | Records that you completed the demo access form and verified your phone number, so the demo opens without asking again. Set only if you request demo access. | Strictly necessary | 30 days |
| Theme preference (browser local storage) | Remembers whether you chose the light or dark version of the Site | Strictly necessary | Until you clear your browser storage |
Strictly necessary cookies do not require consent under Article 82 of the French Data Protection Act.
Third-party content. Our contact page embeds the Calendly scheduling tool so you can book a meeting without leaving the Site. When that page loads, Calendly may place its own cookies and receive your IP address, under its own privacy policy (calendly.com/privacy). Our pages also load fonts from Google Fonts, and the client testimonial video is delivered from Cloudflare R2; both receive your IP address in order to serve the file. If you would rather avoid Calendly entirely, you can write to us at marketing@prescient.studio instead of using the scheduler.
If we add audience measurement or advertising tools in the future, we will deploy a consent management platform first, and these tools will only run after you have opted in.
6. Recipients and processors
We do not sell your personal data. We share it only with:
- Our staff, on a need-to-know basis.
- Processors acting on our instructions under Article 28 GDPR, bound by a data processing agreement:
| Processor | Role | Location |
|---|---|---|
| Netlify | Website hosting and delivery, form submissions, storage of demo access requests | United States |
| Hostinger | Domain and email infrastructure | EU (Cyprus / Lithuania) |
| Workspace (our professional email), Google Fonts delivery | EU / United States | |
| Calendly | Meeting scheduling on our contact page | United States |
| Anthropic | Powers the assistant on our home page; it receives the messages you type there | United States |
| Twilio | Sends the SMS verification code when you request access to the App demo | United States |
| HubSpot | CRM, where demo access requests and prospect contacts are recorded | United States |
| Cloudflare | Delivery of the client testimonial video | United States |
- Authorities, courts, or advisors where required by law or to establish, exercise, or defend legal claims.
- A successor entity in the event of a merger, acquisition, or asset sale, in which case we will inform you and this policy will continue to apply.
7. International data transfers
Several of our providers (Netlify, Google, Calendly, Anthropic, Twilio, HubSpot, and Cloudflare) are established in the United States and may process personal data there. Where personal data is transferred outside the European Economic Area, we ensure an appropriate safeguard under Chapter V GDPR, namely:
- the EU-US Data Privacy Framework where the recipient is certified; and/or
- the European Commission's Standard Contractual Clauses (SCCs), together with supplementary measures where necessary.
You can request a copy of the relevant safeguard using the contact details in Section 1.
8. Data retention
We keep personal data only as long as necessary for the purposes above:
| Data | Retention |
|---|---|
| Prospect data (no contract entered into) | Up to 3 years from our last contact with you |
| Client/commercial-relationship data | Duration of the relationship, then archived for the applicable limitation period |
| Invoicing and accounting records | 10 years, per the French Commercial Code |
| Contact-form / enquiry data | Up to 3 years from last contact |
| Consent records | For the duration required to evidence consent, then deleted |
| Demo access requests (name, professional email, phone) | Up to 3 years from your request |
| Assistant conversations | Not stored by us beyond the exchange itself; our provider processes them under its own terms |
| Cookies and related storage | See Section 5 |
9. Your rights
Under the GDPR and the French Data Protection Act, you have the right to:
- access your data (Art. 15);
- rectify inaccurate or incomplete data (Art. 16);
- erase your data (Art. 17);
- restrict processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interest, and to object at any time to direct marketing (Art. 21);
- withdraw consent at any time where processing is based on consent;
- define directives on the fate of your data after your death.
To exercise these rights, contact marketing@prescient.studio. We may need to verify your identity. We will respond within one month, extendable by two months for complex requests.
If you believe your rights are not respected, you may lodge a complaint with the French supervisory authority:
CNIL, Commission Nationale de l'Informatique et des Libertés, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. Tel. +33 (0)1 53 73 22 22, www.cnil.fr.
10. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the CNIL of any breach where legally required.
11. Children
The Site is intended for professionals and is not directed at children. We do not knowingly collect data from minors under the age of 15.
12. Changes to this policy
We may update this policy to reflect changes in our practices or the law. The "last updated" date at the top indicates the latest revision. Material changes will be communicated by appropriate means.
13. Contact
For any question about this policy or your data:
Prescient SAS, 60 rue François 1er, 75008 Paris, France, marketing@prescient.studio.