Privacy policy
Last updated: October 2026
This policy explains how PARSIO SOFTWARE (“Parsio”, “we”) collects and uses personal data when you visit parsio.ai, get in touch with us, or use the Parsio platform.
1. Who we are, and our role
PARSIO SOFTWARE, SAS registered under SIREN 991 080 763, 90 B rue de Fougères, 35700 Rennes, France.
- Website, prospects and customer relationship: Parsio is the controller of the personal data described in sections 2.1 and 2.2.
- Parsio platform: when a customer’s users work in the platform, Parsio processes their personal data as a processor, on behalf of and on the instructions of the customer, who is the controller. This processing is governed by our Data Processing Addendum (DPA) and the customer’s own privacy notice. Section 2.3 describes it for transparency.
Privacy contact: Xavier Jouppe, dpo@parsio.ai.
2. What we collect and why
2.1 Website visitors
| Data | Purpose | Legal basis |
|---|---|---|
| Audience measurement (pages viewed, device, approximate location) via Google Analytics | Understand how the site is used and improve it | Your consent, given in the cookie banner. Nothing is measured before you accept. |
| Technical data needed to deliver the site and protect the contact page (IP address, browser signals) via Cloudflare and Cloudflare Turnstile | Security and anti-bot protection | Our legitimate interest in keeping the site available and secure |
2.2 Prospects, customers and candidates
| Data | Purpose | Legal basis |
|---|---|---|
| Name, work email, company and your answers, when you fill in a form (white paper, savings calculator) | Send what you asked for and follow up on your interest | Our legitimate interest in answering business requests |
| Name, email and meeting details when you book a demo | Organise the meeting | Pre-contractual steps at your request |
| Business contact and billing details of customer contacts | Manage the contract, invoicing and support | Performance of the contract; legal obligations (accounting) |
| Application data, when you apply for a job through our recruitment platform | Assess your application | Pre-contractual steps at your request |
We do not use this data for automated decision-making, and we do not sell it.
2.3 Users of the Parsio platform (Parsio as processor)
| Data | Purpose |
|---|---|
| Account data: name, business email, role, password (stored only as a salted hash) | Give access to the platform, manage permissions |
| Session and security data: session tokens (stored hashed), IP address, login attempts | Authentication, rate limiting, security |
| Technical logs and usage traces (including user identifier and email) | Error monitoring, debugging, service quality |
The platform is designed to process industrial data (parts, drawings, bills of materials, costs), not personal data. Customers agree not to upload special categories of personal data. Customer data, including personal data, is never used to train AI models, ours or our providers’.
3. Who receives your data
Your data is only accessible to Parsio staff who need it, and to the providers below, each bound by a data processing agreement:
| Provider | Role | Location |
|---|---|---|
| Cloudflare | Website hosting, anti-bot protection | Global network (United States company) |
| Google (Analytics) | Website audience measurement, with consent | United States company, EU data processing where available |
| Attio | Management of prospect and customer contacts | United States (Standard Contractual Clauses) |
| Cal.com | Demo booking | United States (Standard Contractual Clauses) |
| OSS Ventures (recruitment platform) | Job applications | EU |
| Parsio platform providers | See Annex 2 of our DPA | EU |
4. Transfers outside the European Union
The Parsio platform stores personal data in the European Union. Some of the website and sales tools listed above are operated by companies based in the United States. Where personal data is transferred outside the EU, it is protected by the European Commission’s Standard Contractual Clauses and/or the EU–US Data Privacy Framework, as provided in each provider’s data processing agreement.
5. How long we keep it
| Data | Retention |
|---|---|
| Analytics cookies | 13 months maximum |
| Prospect data | 3 years from our last contact with you |
| Customer contact and contract data | Duration of the contract, then archived for the legal limitation periods (5 years; 10 years for accounting records) |
| Job applications | 2 years after our last contact, unless you ask for earlier deletion |
| Platform accounts | Duration of the customer’s contract; deleted or returned at the end, as set out in the DPA |
| Platform technical logs and traces | 30 days |
6. Your rights
Under the GDPR and the French Data Protection Act, you have the right to access, rectify and delete your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time (for analytics, via the cookie banner or your browser settings). You can also set instructions for what happens to your data after your death.
To exercise these rights, write to dpo@parsio.ai. We answer within one month. If you are a user of the Parsio platform, we will pass your request to your employer (our customer), who is the controller, and help them answer it.
If you believe your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr).
7. Security
We protect personal data with encryption in transit (TLS 1.2+) and at rest (AES-256), strict separation between customers, least-privilege access and multi-factor authentication for our staff. Our security practices are being formalised under an ISO 27001 certification programme. See the DPA for the full list of measures.
8. Changes to this policy
We may update this policy to reflect changes in our services or in the law. The date at the top shows the latest version. Significant changes will be announced on this page.