Privacy policy

Data controller

Who is responsible

The data controller is Spectral Flow SAS, 14 Avenue de la Grande-Bretagne, 06230 Villefranche-sur-Mer, France. For any question about your data, contact info@spectralflow.ai.

What we collect & why

Data, purpose and legal basis

Contact and requests. When you email us or use the contact form (general enquiries, programme, laboratory, press or careers enquiries, requests for the model-derived datasheet or an expert simulation session), we process the data you provide, typically your name, email address, organisation and message, for the sole purpose of answering you and managing the relationship that follows. Legal basis: our legitimate interest in answering inbound enquiries, and steps taken at your request before any agreement.

How the form is delivered. Messages sent through the form are passed to our mailbox by Resend, a service of Plus Five Five, Inc. (United States), an email delivery service acting on our instructions. If the form cannot send, your own email client opens with the message prepared, and nothing passes through Resend.

Technical logs. Our host, Vercel Inc. (United States), may process standard technical data (for example IP address, browser and timestamps) to deliver and secure the site. Legal basis: our legitimate interest in the security and proper operation of the site.

Mission demos. The Instrument plays missions computed in advance and served with this site. Only in expert sessions, opened from a dedicated link, does your browser connect to our compute service, hosted by Google Cloud France SARL on servers in the European Union, which computes each simulated mission. That service receives your IP address and standard technical data needed to answer the request. You do not type any personal data into the demos, and we do not use these requests to identify visitors.

Live GNSS interference map. Some pages show a live map from gpsjam.org, a third-party site run by John Wiseman. The map loads automatically when you come close to that part of the page: your browser then connects to gpsjam.org, which receives your IP address and standard technical data. Inside the map, gpsjam.org may load its own resources (map tiles, fonts, cookie-free audience measurement), some of them from other providers, which then also receive your IP address, and may keep its settings in your browser's storage. This happens under gpsjam.org's own terms. We receive nothing from gpsjam.org about you. To know whether the map is available, our own server, not your browser, checks that gpsjam.org is answering; that check carries nothing about you. If the map cannot be shown, the page displays a drawing made by us instead. Legal basis: our legitimate interest in showing current public data on satellite navigation interference.

Cookies and audience measurement. This site uses no audience measurement (the gpsjam.org map described above runs its own, cookie-free), no advertising or tracking cookies, and does not profile visitors. Fonts and images are served from this site itself, except inside the third-party map described above. Only strictly necessary cookies required for the site to be served securely may be set by our host. No consent banner is therefore required; should we add audience measurement, this policy will be updated first and consent requested where the law requires it.

Retention & sharing

How long, and with whom

We keep enquiry data while we handle your request and the relationship that follows, and no longer than three years after our last exchange; then we delete it. We do not sell personal data. It may be processed by our service providers (hosting, compute and email delivery, named above) acting on our instructions. Some of them operate outside the European Union, in particular in the United States; such transfers rely on the safeguards provided by the GDPR, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

Your rights

Access, rectification, erasure

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. To exercise these rights, contact info@spectralflow.ai.

If you believe your rights are not respected, you may lodge a complaint with the French data-protection authority, the CNIL (cnil.fr).

See also our legal notice. This policy may be updated; the current version governs.