Privacy policy

Data controller

The data controller is:

MYNOS AI (SAS) — 73 avenue Ledru-Rollin, 75012 Paris, France — SIREN 935 398 768.

Any request regarding your data can be sent to contact@mynos.ai.

Data collected and purposes

Contact form (/contact). When you fill in the form, we collect your name, your work email, your company name (optional) and the content of your message. Your IP address is also recorded for technical reasons (abuse prevention). This data is used solely to reply to you.

Chatbot assistant. When you interact with the Mynos assistant, we process the content of your messages, the detected language and your IP address (for rate limiting). If you share an email in the conversation, it will be treated as a contact request.

Audience measurement (optional, with consent). If you accept it via the cookie banner, we use PostHog (hosted in the European Union, proxied through our own domain) to measure aggregated events: page views, CTA clicks, chatbot opens, article reading time. A random identifier (distinct_id) is stored in your browser's localStorage to recognise your successive visits, but no IP address is retained by PostHog and no user profile is created unless you explicitly share your identity with us. If you refuse, none of these events are collected and no identifier is created.

Server logs. Our host Vercel retains technical logs (HTTP method, URL, response code, latency, truncated IP) for a limited period for operational monitoring.

Legal bases

Article 6.1.a (consent) — you voluntarily provide your data via the form or chatbot to obtain a response to your request. PostHog audience measurement is also subject to your explicit consent via the cookie banner.

Article 6.1.f (legitimate interest) — site security, abuse prevention (rate limiting, anti-spam), technical server logs. This legitimate interest is proportionate: no data is used for advertising or commercial profiling.

Recipients and subprocessors

Your data is accessible only to the MYNOS AI team (the three cofounders). It may be processed by the following subprocessors, governed by data processing agreements (DPAs):

Vercel Inc. (United States) — site hosting and serverless functions.

Google LLC (United States) — transient processing of chatbot conversations via the Gemini API. Google does not reuse the data to train its models under this API.

n8n (European Union, EU cloud) — internal orchestration of lead notifications.

Slack Technologies (United States) — internal notification when a lead is captured.

PostHog (European Union) — audience measurement, enabled only if you give your consent.

Transfers outside the European Union

Some subprocessors (Vercel, Google, Slack) may process data in the United States. These transfers are governed by Standard Contractual Clauses approved by the European Commission and, where applicable, by certification under the EU — US Data Privacy Framework.

Retention periods

Contact messages: 3 years from the last exchange, then deletion.

Chatbot conversations: 12 months on the Mynos side for system improvement, then deletion. The local history on your browser remains stored locally as long as you do not clear your browser storage.

IP logs (rate limiting): up to 24 hours in memory, never persisted to a database.

Audience measurement (if consent given): 13 months (CNIL recommendation). You can revoke your consent at any time by clearing your browser local storage.

Cookies and local storage

This site uses no tracking cookies, no advertising pixels, no third-party cookies for marketing purposes.

We use browser localStorage for three purposes: (1) remembering your choice on the cookie banner — strictly necessary; (2) keeping your conversation history with the assistant locally (if you use it) — strictly necessary for the requested service; (3) if you accepted audience measurement, a random PostHog identifier (distinct_id) to recognise your successive visits. This data never leaves your browser except the PostHog identifier which is transmitted to our server through our own domain (/ingest proxy).

To revoke your consent to audience measurement, clear your browser local storage for the mynos.ai site. The banner will reappear on your next visit.

Your rights

Under the General Data Protection Regulation (GDPR) and the French Loi Informatique et Libertés, you have the following rights regarding your personal data:

Right of access, right to rectification, right to erasure (right to be forgotten), right to restrict processing, right to data portability, right to object.

To exercise these rights, write to contact@mynos.ai stating the subject of your request. We respond within a maximum of one month.

If you believe your rights are not respected, you may file a complaint with the French data protection authority (CNIL) — www.cnil.fr.

Updates to this policy

We may update this policy in case of changes to the site, the subprocessors used or applicable regulation. The last-updated date is shown at the top of this page.