Privacy policyPrivacy policy

This page explains what data we collect on croissant.agency, why, how long we keep it and how to exercise your rights. Last updated: 1 November 2026.

Who is responsible for your data

Croissant is the trade name of FRAME-UX, a French single-member limited company (EURL) with a share capital of €5,000, registered with the Grenoble Trade and Companies Register under number 992 663 807. FRAME-UX is the controller of the processing described on this page.

For any question about your data, write to nathan@croissant.agency in a new tab.

The data we collect

We only collect what each use of the site needs:

• Browsing: pages viewed, where the visit came from, device and browser type, technical IP address.
• Contact request: your answers to the contact panel questions and your email address.
• Booking a call: your name, your email, your phone number if you give it and your answers to the booking questions (need, budget, details).
• Chatting with Jenna, our assistant: the content of the conversation and, if you give them, your contact details. Details below.
• WhatsApp message: your number and your messages, if you write to us on WhatsApp.

Why we use it

• To answer your requests and prepare our discussions. Legal basis: the pre-contractual steps you ask for, or our legitimate interest in answering the companies that contact us.
• To organise the calls you book. Legal basis: the pre-contractual steps you ask for.
• To measure traffic and improve the site. Legal basis: your consent, given from the cookie banner, for Google Analytics, Humblytics and the CiteMe script; our legitimate interest for technical statistics that store nothing on your device (server logs, the CiteMe pixel).
• To keep the site secure and prevent abuse. Legal basis: our legitimate interest.

We do not sell your data and we do not use it for advertising.

Our providers

These providers process data on our behalf, only for the service they provide to us:

Several of these providers are established outside the European Union, notably in the United States (Cloudflare, Google, Cal.com, Resend) and in Canada (Humblytics). These transfers are covered by the safeguards provided for by the GDPR: an adequacy decision of the European Commission, certification under the EU-U.S. Data Privacy Framework or standard contractual clauses. The up-to-date list is available on request.

Jenna, our chat assistant

Jenna answers your questions and points you in the right direction. She processes:

• a technical session identifier, stored in your browser’s local storage, to keep the conversation going if you reload the page;
• the content of the messages you exchange with her;
• your contact details, if you choose to give them, so that we can get back to you;
• your IP address, only to limit the number of requests and protect the service. It is not used to identify you or to track you across sites.

Conversations are hosted in the European Union. Replies are written by an artificial intelligence model provided by Anthropic, a company established in the United States: the content of your messages is sent to it to produce the reply. Legal basis: our legitimate interest in answering your requests and, for your contact details, your consent. Conversations are kept for 12 months, then deleted or anonymised.

Additional professional information. If you give Jenna your work email address, we complete your record to prepare our reply: your first and last name, your job title, your company and its public legal information (identification number, sector, headcount, published revenue), its website, the phone number it publishes itself and the address of your public professional profile. For requests that match our services, we also look for a phone number to reach you directly. It may be a personal mobile number.

This data does not come from you: it comes from public registers, your organisation’s legal notice and data enrichment providers, Dropcontact and FullEnrich (France) and Apollo.io (United States). This page informs you of this indirect collection, as required by Article 14 of the GDPR. Legal basis: our legitimate interest in qualifying professional requests and answering them through the most suitable channel.

For the phone number search, your name, your work email and the name of your organisation are sent to Apollo.io (certified entity: ZenLeads, Inc.), which processes them outside the European Union. This transfer is covered by the European Commission’s standard contractual clauses, and Apollo.io is certified under the EU-U.S. Data Privacy Framework. Other providers in the enrichment chain use subcontractors outside the European Union, under the same conditions. You can ask Apollo.io directly to delete your profile through its dedicated form in a new tab.

This information is stored in the Jenna tool, which our team can access. It is kept for 12 months after your last exchange with us, unless a business relationship begins. You can object to this processing at any time, without giving a reason, by writing to nathan@croissant.agency in a new tab: we then stop any search and delete the information already obtained, including your phone number.

How long we keep it

• Contact requests and calls: 3 years after our last exchange, unless a business relationship begins. Client data is then kept for the term of the contract, then for the periods required by law.
• Conversations with Jenna and additional information: 12 months, see above.
• Audience measurement: 25 months at most.

Cookies and local storage

The site sets no advertising cookies. Google Analytics, Humblytics and the CiteMe script only load if you accept them, from the banner shown on your first visit. Without your consent, CiteMe only receives a technical call (a pixel) that stores nothing on your device, to count visits coming from an AI answer. Google Analytics then sets its cookies, kept for 13 months at most, and CiteMe a visitor identifier kept for one year. Your choice is kept for six months in your browser’s local storage. You can change it at any time with the “Manage cookies” link at the bottom of every page: declining clears these identifiers. The site also keeps your theme choice (light or dark) in your browser’s local storage, and Jenna keeps her session identifier there. You can clear them at any time from your browser settings.

Your rights

You can ask to access your data, have it corrected or erased, restrict its processing or receive it in a portable format, and you can object to its processing. Write to nathan@croissant.agency in a new tab, we reply within one month. On request, we tell you where each piece of information we hold comes from.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority, on cnil.fr in a new tab.