Privacy policy

1. Who we are

This policy explains what personal data we process when you visit the ipand.io website, use the app.ipand.io application, connect an assistant to the mcp.ipand.io server, or write to us; why, on what legal basis, for how long, with whom, and how to exercise your rights.

The controller is CODEVIUM SAS, a société par actions simplifiée (simplified joint-stock company) with a share capital of €1,000, RCS Paris 988 166 393, 60 rue François 1er, 75008 Paris, France, publisher of the iPand service.

Contact for any question about your data or to exercise your rights: contact@ipand.io, or by post at the address above.

We have not appointed a data protection officer. Any question about your data should be sent to contact@ipand.io.

2. Our role depending on the data

• We are the controller for the data of website visitors, prospects, application users in respect of their account (identity, sign-in, security, acceptance of the terms), the measurement of the use of the application, billing, support and the emails we send.
• We act as a processor on behalf of our customers for the data they entrust to us in their workspace: composition of their organization (members, roles, invitations), content entered (prompts, entities, tasks), conversations with Pandi. For this data, the controller is the customer company; we process it in accordance with its instructions, under the terms of the Data Processing Agreement annexed to the General Terms of Sale. If you are a member of a company’s workspace, you may contact that company, or us: we will forward your request to it.

3. On the ipand.io website

4. In the app.ipand.io application

4.1 Your account and your sign-in

4.2 Your organization and your use of the service

4.3 Subscription and billing

4.4 Emails

4.5 Support, feedback and demos

4.6 Technical logs

Our servers produce technical logs (errors, performance, requests) with technical identifiers; the IP address is masked in them by the monitoring tool. Legal basis: legitimate interest (operation and security). Retention: 30 days.

4.7 Usage measurement and first contact

We measure the use of the application in order to improve it, monitor our business and support our customers: screens displayed and their loading time, time spent, features used, errors displayed, limit-reached windows, steps of sign-up, onboarding and payment, plan changes, exports, guided tours, MCP server calls. When your account is created, we record once where you came from: campaign and affiliation parameters of the landing address, domain of the referring website, page of our website from which you clicked, and an approximate country based on your browser’s time zone. These measurements contain neither your prompts, nor the answers, nor what you enter, nor your email address; the IP address is not kept. They go through no third-party tool and set no cookie and no data in your browser’s storage. On the ipand.io website, a script carries the campaign parameters over to the links to the application, without storing anything. Only the iPand team sees the indicators derived from them.

You may object to the measurement of your use by writing to contact@ipand.io (§ 11).

4.8 Affiliate program

Agencies, consultants and creators can apply to our affiliate program on the website, then follow their code, the customers they referred and their commissions in the partner area of the application. This program is governed by the affiliate program terms.

An account is attributed to a partner solely on the basis of the code present in the address of your first visit: no cookie or browser data keeps it. If you are a referred customer, the partner only sees anonymized information about you (rank, dates, status, commission amounts): never your name, your email address or the data in your workspace. To detect abuse, the iPand team compares, when reading, the domain of email addresses and membership of the same organizations, without keeping anything more. No bank details are stored in the service: the partner sends their invoice and bank details by email to contact@ipand.io. Accounting documents are sent to our chartered accountant.

5. Third-party data in AI assistants’ answers and in the pages analyzed

The service queries artificial intelligence assistants (ChatGPT, Gemini, Perplexity, AI Overviews, AI Mode…) with the questions chosen by our customers, then analyzes the answers and the sources cited; it also analyzes the public pages of the websites tracked. This public content may mention people: executives, authors, experts, published reviews.

• Purpose: measuring the visibility of brands and providing the service’s analyses.
• Legal basis: the legitimate interest of our customers and of ourselves in analyzing the presence of brands in publicly accessible content.
• Retention: during the brand’s subscription, then 12 months after it ends; raw answers from providers: 30 days; screenshots of the pages analyzed: 183 days.
• Information: these people cannot be informed individually, which would involve a disproportionate effort (Article 14(5)(b) of the GDPR); this policy takes its place. They may object to the processing by writing to contact@ipand.io.

6. Language models

6.1 iPand features

Some features rely on language models supplied by an AI model provider: analysis of answers, page audits, generation and matching of prompts, brand profile during onboarding, recommendations and Pandi, iPand’s GEO assistant. The data sent is what each feature needs: collected answers, texts of the pages and of the brand, your messages to Pandi.

• Location: our models are deployed in the European Union; requests and answers may be processed in any Member State of the Union.
• Training: according to our provider, requests and answers are not used to train, retrain or improve the models.
• Storage of answers: we ask that answers not be stored by the service.
• Abuse monitoring: our provider keeps requests and generated content, for a limited period that it sets, to detect abuse. This data stays in the European Union; it is reviewed first by automated means, then, if necessary, by authorized employees of the provider located in the European Economic Area. We have not requested an exemption from this monitoring.

6.2 Collection of the engines’ answers

The tracked prompts are sent, without the customer’s name, without the brand and without any account data, to the data providers that collect the engines’ answers. Do not include personal data in your prompts.

• Core engines (ChatGPT, Gemini, AI Overviews, AI Mode, Perplexity, Copilot): their answers are collected by collection providers, established in the European Union or in the United States. They receive the text of the prompt and, depending on the engine, the country, city and language of the market, together with a technical identifier of the run. We never query an engine with our own robots.
• Custom plan engines (Claude, Grok, Mistral): their answers are obtained from the publisher of each engine, established in the European Union or in the United States, only for a brand that tracks that engine. It receives the text of the prompt and, depending on the engine, the country, city and language of the market.
• Retention and training: each provider keeps requests and answers in accordance with its data processing agreement: from the time needed to generate the answer to 12 months depending on the provider, or until the end of the service, and up to 2 years for content flagged under its usage policy. According to their terms, those that develop models do not use this content to train them.

The list of these providers, with their place of processing and their safeguards, is provided to you on request at contact@ipand.io.

No decision producing legal effects concerning you or similarly significantly affecting you is made solely on the basis of automated processing.

7. Recipients

Your data is accessible only to the people at iPand who need it, and to the members of your organization according to their rights. It is not sold, rented or used for targeted advertising.

It is processed by our providers, within the limits of their assignment, and the Data Processing Agreement sets out the commitments that apply to our customers’ data. By category, they are:

• Hosting, in the European Union: Microsoft (Microsoft Ireland Operations Ltd), for the website, the application, the API, the database and the files.
• AI model providers: language models for iPand’s features, in the European Union (§ 6.1).
• Data providers: collection of the engines’ answers, prompts only (§ 6.2); for a Custom plan engine, only for a brand that tracks it.
• Payment: Stripe, for payment, subscriptions, invoices and tax calculation.
• Email delivery: Resend (Plus Five Five, Inc.), including the weekly summary sent to the iPand team. Emails are sent from Resend’s sending region in Ireland; the Resend account data, including email metadata and logs, is stored in the United States.
• Domain names and email: OVH, for the contact@ipand.io mailbox, in France.
• Audience measurement: Google, on the website, with your consent.
• Anti-bot check: Cloudflare (Cloudflare, Inc.), on the free scan form of the website: technical browser signals and IP address, for the duration of the check. Turnstile sets no persistent cookie; Cloudflare’s pre-clearance, which would set the cf_clearance cookie, is not enabled.

The detailed list of our subprocessors, with the place of processing and the safeguards of each, is provided to you on request at contact@ipand.io.

Third-party assistants connected through MCP. If you authorize an assistant (for example claude.ai or ChatGPT) to read your iPand data through the MCP server, the data it reads is sent to its provider (Anthropic, OpenAI…), which processes it under its own terms. You can withdraw this access at any time in Settings › Integrations.

Sign-in with Google or Microsoft. If you choose this sign-in method, Google or Microsoft sends us your identity (identifier, email address, name); these services process your data under their own policies.

We may disclose data to the authorities where the law requires it.

8. Transfers outside the European Union

Hosting and language models remain in the European Union. Some providers are established outside the Union or use companies that are:

• Data providers established in the United States (collection providers and publishers of Custom plan engines): transfer governed by the European Commission’s standard contractual clauses (Module 2, controller to processor, and Module 3 for some), incorporated into their data processing agreement.
• Data providers established in the European Union: some process data in the United States or use subprocessors located in particular in the United States and the United Kingdom; these transfers are governed by standard contractual clauses or adequacy decisions, according to their data processing agreement or their privacy policy. One of them, the publisher of a Custom plan engine, uses providers located in the Union as a priority, and providers located outside the Union in exceptional cases.
• Resend (United States): its account data is stored in the United States; transfer governed by Resend’s certification under the EU–US Data Privacy Framework and by the standard contractual clauses (Module 2) incorporated into its data processing agreement.
• Stripe (Stripe Payments Europe, Limited, Ireland) transfers some data to Stripe, LLC, in the United States: transfer governed by the certification of Stripe, LLC under the EU–US Data Privacy Framework and, failing that, by the standard contractual clauses of its Data Transfers Addendum.
• Google (Google Ireland Limited) may process the website’s audience measurement data in the United States, at Google LLC: transfer governed by the certification of Google LLC under the Data Privacy Framework and by the standard contractual clauses of its data processing terms.
• Cloudflare (Cloudflare, Inc., United States), for the anti-bot check of the free scan: transfer governed by the certification of Cloudflare, Inc. under the EU-U.S. Data Privacy Framework, with its UK extension, and under the Swiss-U.S. Data Privacy Framework; failing that, by the standard contractual clauses of its data processing agreement.

You can obtain a copy of the safeguards by writing to us at contact@ipand.io.

9. Erasure and backups

Data that you delete is erased from our database within 30 days. Data that reaches the end of its retention period is erased at the next purge run: every morning for most data; every month for the waiting list, contact and demo requests, feedback, onboarding attempts, brands whose subscription has ended, usage events, rejected applications to the affiliate program and expired proofs of acceptance, that is, up to one month after the stated deadline.

It then disappears from our backups and archives within 90 days at most:

• point-in-time restore of the database over 14 days;
• geo-redundant backup copies of the database, kept in the West Europe region and replicated by Microsoft to the paired Azure region North Europe (Ireland), both in the European Union;
• soft deletion of files for 14 days;
• monthly archive of the database, produced and verified in Azure, West Europe region, and kept for 90 days at most in Azure storage in that same region.

10. Security

Encrypted connections, hosting in the European Union, passwordless sign-in by one-time code, Google or Microsoft, secrets in a dedicated vault, service access through managed identities, strict isolation between organizations, access restricted to authorized persons, logging of sign-ins and administrative actions, backups. The details are in Annex B of the Data Processing Agreement.

11. Your rights

You have the right of access, rectification, erasure, restriction, objection (in particular to follow-up emails, to usage measurement and to other processing based on legitimate interest), portability, the right to withdraw your consent at any time, and the right to set instructions regarding what happens to your data after your death.

How to exercise them:

• Access and rectification: Settings › My profile displays and changes your last name, first name and telephone number; the interface language is set in Settings. A change of email address is requested at contact@ipand.io; we check that the request does come from you before making the change.
• Copy of your data: on request to contact@ipand.io, we send you your data in a structured format, within one month. An organization administrator can also download the archive of the organization’s data (Settings › Organization).
• Deleting your account: Settings › My profile › Delete my account. If you are the last administrator of an organization that has an ongoing subscription, you must first appoint another administrator, or cancel the subscriptions (effective at the end of the period); the data is then erased as described in § 9.
• Deleting a customer company’s data: an administrator deletes the brands (erasure within 30 days), cancels the subscriptions, then the members delete their accounts; an organization with no members and no ongoing subscription is marked as deleted at the next morning purge run, then erased 30 days later.
• Follow-up emails: one-click unsubscribe link in every message.
• Audience measurement: "Manage cookies" link at the bottom of every page of the website.
• Measurement of the use of the application: to object to it, write to contact@ipand.io; we act on it within the time limit stated below.
• Any other request: contact@ipand.io, or by post at the address in § 1. We reply within one month, a period that may be extended by two months for a complex request; we may ask you to prove your identity in case of doubt.

You may lodge a complaint with a supervisory authority (Article 77 of the GDPR), in particular the one in the Member State of your habitual residence, your place of work or the place of the alleged infringement. In France: Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

12. Minors

The service is intended for professionals and is not designed for minors.

13. Cookies and local storage

The website and the application use cookies and your browser’s storage: the cookie policy describes them.

14. Changes

We may change this policy, in particular to reflect changes in the service or in our providers. The version in force is published on this page with its number and its effective date. A substantial change is announced by email to the application’s users; if it concerns processing based on your consent, your consent is requested again.

15. Language

This text is written in French. Its translations are provided for information only; in the event of any discrepancy, the French version prevails.