Privacy Policy

Last updated: August 2026

1. Identity of the Data Controller

Personal data collected via the website unyx.studio is processed by:

UNYX
60 rue François Ier, 75008 Paris, France
SIREN: 100 489 004
Manager: Michaël Haim Chiche
Email: [email protected]

UNYX acts as the data controller within the meaning of the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

2. Data Collected

In the course of its business and the operation of the unyx.studio website, UNYX may collect the following categories of data:

Identification data

Last name, first name
Business or personal email address
Telephone number

Professional data

Company name and business sector
Job title

Browsing data

IP address
Browser type and operating system
Pages visited, duration of visits, referring pages
Cookie data (see Cookie Policy)

Data relating to services

Information shared in connection with quote requests, project briefs or service contracts
Exchanges by email or via contact forms

3. Purposes and Legal Bases of Processing

Responding to a contact or quote request: legitimate interest / performance of a contract
Customer relationship management: performance of a contract
Sending commercial communications (newsletter, offers): consent
Commercial prospecting of business contacts (email, follow-up SMS regarding a request): legitimate interest, with the right to object at any time (unsubscribe link)
Improving the website and audience analysis (statistics, session recording via Microsoft Clarity): consent (cookie banner)
Advertising measurement and attribution of campaigns and affiliation (campaign identifiers, gclid): consent (cookie banner)
Provision of artificial intelligence features (automated audit, conversational agents, content generation, advertising account analysis, website monitoring): performance of the contract or of the requested service, and legitimate interest for requests made before a contract is concluded. See the AI Charter
Prevention of account sharing on UNYX Academy (personalised watermark on content, access logging, detection of abnormal behaviour): legitimate interest / performance of the contract
Compliance with legal and accounting obligations: legal obligation
Fraud prevention and access security: legitimate interest

4. Retention Period

Personal data is retained for the period strictly necessary for the purposes for which it was collected:

Prospect data: 3 years from the last contact
Customer data: 5 years from the end of the contract (accounting and tax obligations)
Browsing data / cookies: 13 months maximum
Consent data for commercial prospecting: 3 years from the date consent was obtained

5. Recipients of the Data

Personal data collected by UNYX may be disclosed to the following categories of recipients:

UNYX employees and internal service providers authorised to access it in the course of their duties
Technical subcontractors, in strict compliance with the GDPR and under compliant data processing agreements, in particular: Cloudflare (hosting and delivery), Supabase (database), Stripe (payment), Google (advertising measurement, subject to your consent), Microsoft Clarity (audience analysis, subject to your consent), Brevo and Resend (email sending), Twilio and TopMessage (telephony and SMS), OVHcloud (sending infrastructure), Anthropic and OpenAI (providers of the artificial intelligence models used by UNYX services)
The competent authorities where required by law

UNYX does not sell, rent or transfer any personal data to third parties for commercial purposes.

6. Transfers Outside the European Union

In connection with the use of certain third-party tools (hosting, analytics, emailing, providers of artificial intelligence models), data may be transferred to countries located outside the European Union. UNYX ensures that such transfers are governed by appropriate safeguards (standard contractual clauses of the European Commission, an adequacy decision or another mechanism compliant with the GDPR).

7. Your Rights

In accordance with the GDPR and the amended loi Informatique et Libertés (French Data Protection Act), you have the following rights with regard to your personal data:

Right of access: to obtain a copy of the data concerning you
Right to rectification: to request the correction of inaccurate or incomplete data
Right to erasure: to request the deletion of your data in the cases provided for by law
Right to restriction of processing: to request the temporary suspension of processing
Right to object: to object to processing based on legitimate interest or carried out for commercial prospecting purposes
Right to data portability: to receive your data in a structured, machine-readable format
Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before such withdrawal

To exercise your rights, please send your request by email to: [email protected], enclosing a copy of proof of identity.

UNYX undertakes to respond within one month of receiving your request. This period may be extended by a further two months in the case of a complex request.

8. Complaint to the CNIL

If you consider that your rights have not been respected, you may lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés, the French data protection authority):

Online: https://www.cnil.fr/fr/plaintes
By post: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07

9. Artificial Intelligence and Automated Decisions

Certain UNYX services rely on artificial intelligence systems. The content you submit to these systems (the text of a request, the URL of a website to be audited, elements of a brief) is processed by the models of our providers Anthropic and OpenAI, solely for the purpose of producing the requested response or deliverable.

This content is not used to train or improve these models: the professional terms subscribed to by UNYX with these providers exclude such use.

Exchanges with these systems are logged for security, traceability and the handling of complaints, and are retained for the periods set out in Article 4.

Automated decisions (Article 22 of the GDPR): no decision producing legal effects concerning you, or similarly significantly affecting you, is taken solely on the basis of automated processing. The scores and classifications produced by our systems (audit score, classification of a request) are indications subject to human assessment. You may request human intervention, express your point of view and contest the outcome at [email protected].

Details of the systems concerned, the models used and the associated safeguards can be found in the AI Charter, published pursuant to Regulation (EU) 2024/1689 on artificial intelligence.

10. Data Security

UNYX implements appropriate technical and organisational measures to ensure a level of security appropriate to the risks: encryption of data in transit (HTTPS), restricted and authenticated access, system monitoring, and security incident management procedures.

In the event of a personal data breach likely to result in a risk to your rights and freedoms, UNYX undertakes to notify the CNIL within 72 hours and, where applicable, to inform you accordingly.

11. Changes to This Policy

UNYX reserves the right to amend this privacy policy at any time in order to keep it in line with legislative and regulatory developments. Any amendment will be published on this page, with the date at the top updated accordingly.