Privacy policy

01

Roles

Controller for hosting data

Vercel Inc.

Controller for PRISME

INNOVATIO

02

Optional audience measurement

Google Analytics is optional. No Google script, measurement cookie, advertising tracker or retargeting tool is loaded before your explicit permission. Refusing or withdrawing permission leaves all site content available.

With your permission, the site measures viewed pages and resource downloads to improve content. Google Signals, advertising personalisation and retargeting audiences are disabled. No user account, newsletter or contact form is active.

Your choice is stored in your browser’s local storage for six months. After permission, Google Analytics may set the _ga and _ga_TMLDL3G2SD cookies for up to thirteen months. Measurement data are kept in Google Analytics for fourteen months, without extension when you return, and are then deleted. The “Manage cookies” control in the footer lets you change or withdraw permission at any time.

03

PRISME and session storage

Each page loads the PRISME widget script. Opening it is voluntary: it creates a technical session and sends the messages entered so that the service can respond. The widget keeps only its collapsed interface state for the current browser session in sessionStorage; it does not use a persistent application cookie or localStorage. Do not submit sensitive or unnecessary personal information. Exchanges are redacted and then analysed to produce the answers and to improve the content, as the service interface indicates.

04

Hosting technical data

According to its privacy policy, Vercel collects information about traffic to the sites it hosts: IP address, approximate location derived from the IP address, system configuration, logs, timestamps and characteristics of the request or the browser.

Vercel states that it uses this information to provide and maintain the service, ensure its security and meet its legal obligations. For people located in the EEA, the published bases include, depending on the purpose, performance of the contract, legal obligation, and the legitimate interest attached to security and abuse prevention.

Vercel retains the information for the minimum period necessary for the purposes, obligations, disputes and legitimate interests it describes, then deletes or anonymises it. It may process the information in the United States and other jurisdictions, and states that it relies, where necessary, on standard contractual clauses or another appropriate mechanism.

The categories of recipients published by Vercel include its affiliates, its customers where the service requires it, its technical and professional providers, and the authorities or parties to which disclosure is required by law, security or the defence of rights.

Factual source: Vercel privacy policy, effective 1 June 2026.

05

External links

Links to LinkedIn, Google Calendar, Outlook or other services load those platforms only if you open them; their own policies then apply. Google Analytics, a Google LLC service, receives the consented measurement data, which may be transferred to the United States. These transfers rely on the European Commission’s adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework (Article 45 GDPR), under which Google LLC is certified; the certification can be checked on the official Data Privacy Framework list.

06

Your rights

Depending on your situation, you may request access to your data, its rectification or erasure, the restriction of processing, or object to the processing.

Proof of identity will be requested only in case of reasonable doubt. You may also lodge a complaint with the Commission nationale de l’informatique et des libertés, the French supervisory authority. The French privacy policy identifies the applicable rights channel and the current contact details.

07

Security and updates

Exchanges are protected by HTTPS. Once opened, the PRISME conversation interface is displayed in an embedded frame; its bootstrap script nevertheless runs in the page. Any new measurement purpose, account, newsletter or form must be preceded by a new assessment and an update of this policy.

Last updated: 11 September 2026.

08

PRISME service data

Declared legal basis

Legitimate interest in providing the assistant and improving the content.

Retention period

Eight hours per session at most.

Recipients

Vercel Inc. and the technical providers strictly necessary for PRISME to operate.

Transfers

Any transfers outside the EEA are covered by the appropriate safeguards.