Privacy
Privacy Policy
This policy explains how personal data is handled when someone visits the public Didro website, requests a Didro resource, or contacts Didro by email.
Scope
This policy applies to the public Didro website. It does not cover a customer workspace, beta product access, document uploads, or customer implementation data processed under a separate agreement.
Data controller
- Controller
- Didro SAS
- Registered office
- 13 rue Saint-Lazare, 75009 Paris, France
- Privacy contact
- Vassili@didro.ai
Contact for privacy requests
- Privacy contact
- Vassili@didro.ai
Data processed on the website
- Email data, such as name, email address, company, role, and message content, when a visitor chooses to contact Didro.
- Resource access data: the email entered (without ownership verification), first access time, requested resource, invitation/source, and notification delivery status.
- Website usage data collected through Vercel Web Analytics.
- Performance data collected through Vercel Speed Insights.
- Technical data, including browser, device, request, and country signals used by hosting infrastructure to serve and secure the website.
Why this data is used
- To answer inbound messages and demo or workflow discussions.
- To provide requested resources and notify the Didro team of access requests.
- To understand whether the website is useful to visitors.
- To monitor website performance and technical reliability.
- To protect the website from misuse and maintain its availability.
Legal bases
- To respond to an enquiry or discuss a requested demonstration: steps taken at the visitor's request and Didro's legitimate interest in responding to business enquiries.
- To provide a requested resource and manage access records: steps taken at the visitor’s request and Didro’s legitimate interest in managing resources shared with prospects and clients.
- To operate, secure, measure, and improve the public website: Didro's legitimate interests in running a reliable and useful website.
Sharing and service providers
Vercel Inc. provides website hosting, Web Analytics, and Speed Insights. It receives only the data needed to provide those services.
Neon stores resource access records in an EU-hosted PostgreSQL database. Resend delivers access notifications to the Didro team. Whimsical hosts the linked resource and applies its own privacy policy when a visitor opens it.
The public website has no newsletter signup, chat widget, or CRM embed, and it does not automatically send visitor data to a CRM.
Where a provider processes personal data outside the European Economic Area, appropriate contractual or legal safeguards are used where required.
Retention
Email exchanges and resource access records are kept for as long as needed to handle the request and maintain the relevant business relationship. The didro_resource_access cookie expires after 30 days. Analytics, performance, and technical data are retained according to the settings and retention periods of the tools used to operate the website.
Your rights
Depending on the situation, people may request access, rectification, deletion, objection, restriction, or portability of their personal data. Requests can be sent to the privacy contact above.
People in the European Union may also contact their local data protection authority. In France, this authority is the CNIL.