- What we collect
- What you send through the form (venue name, city, email). Our host also keeps standard server logs (IP address, browser) for security.
- Why, and on what basis
- To send you the report and one follow-up about it: our legitimate interest in answering business requests. We never sell your data. Every email has an unsubscribe link.
- The check
- It only receives the venue's name and city: SerpAPI (Google Maps, TripAdvisor) and Google Gemini. Results come from AI assistants and can vary.
- Who processes it for us
- Resend (sending the emails), our database and customer records hosted on Railway, Vercel (this site) and PostHog (visit statistics, in the EU, without tracking cookies, IP addresses anonymised). Some are US companies: transfers rely on the EU-US Data Privacy Framework or standard contractual clauses.
- How long
- Three years after our last exchange, or sooner if you ask us to delete it.
- Your rights
- You can ask to see, correct, delete or take a copy of your data, or object to how we use it: write to hello@madworks.ai. You can also complain to the CNIL (cnil.fr), France's data protection authority.