Privacy policy

This policy explains how personal data is handled on vanquor.io (the “Site”). The Site is a marketing site for Vanquor, operated by Izys, Saint-Barthélemy (the “Controller”). Contact: [email protected].

Data processing performed inside the Vanquor product for clients is governed by each client’s agreement and data-processing addendum — see Data processing (DPA) — not by this policy.

1. Data we collect on this Site

• Demo & contact requests. Name, work email, company, firm type, approximate scale, primary need, timeline and any message you include — provided by you, to respond to your request.
• Technical logs. Standard server logs (IP address, user agent, requested URL, timestamp) retained briefly for security and abuse prevention.
• Consent choices. Your privacy choices, stored locally in your browser (localStorage), not on our servers.
• Analytics (only with consent). If enabled and consented to, we use privacy-first, cookieless analytics (aggregate page statistics, no cross-site tracking, no advertising identifiers).

We do not run advertising trackers, and we do not sell or share personal information for cross-context behavioural advertising.

2. Purposes and legal bases (GDPR)

• Responding to your enquiry — performance of pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) and legitimate interest in operating a B2B sales process (Art. 6(1)(f)).
• Security and abuse prevention — legitimate interest (Art. 6(1)(f)).
• Analytics — consent (Art. 6(1)(a)); you may withdraw at any time via “Cookie & privacy preferences” in the footer.

3. Retention

• Demo/contact requests: for the duration of the evaluation and up to 24 months after last contact, unless a client relationship begins.
• Technical logs: up to 12 months.
• Consent records: for as long as your browser stores them; you can clear them at any time.

4. Recipients and processors

Data is accessed only by the team handling institutional enquiries, and processed by service providers acting on our instructions: site hosting, CRM/lead-management tooling, and (if consented) the analytics provider. Processors are bound by data-processing agreements.

5. International transfers

Where personal data is transferred outside your jurisdiction (including to/from the EU and the US), we rely on appropriate safeguards such as the EU Standard Contractual Clauses or equivalent mechanisms.

6. Your rights (GDPR)

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest, and withdraw consent at any time. Write to [email protected]. You may also lodge a complaint with your supervisory authority (in France, the CNIL).

7. California notice (CCPA/CPRA)

In the preceding 12 months we have collected the categories described in section 1 (identifiers, professional information, internet activity). We use them for the business purposes in section 2, retain them per section 3, and disclose them to the service providers in section 4. We do not sell personal information and do not share it for cross-context behavioural advertising.

California residents may exercise rights to know, access, correct and delete, free from discrimination, via [email protected]. A “Do Not Sell or Share My Personal Information” control is available in the footer and is honoured even though we do not currently sell or share personal information.

8. Cookies and local storage

• vq-consent-v1 (localStorage, essential): stores your privacy choices. No expiry; clear via your browser or the preferences panel.
• Analytics script (only after consent): cookieless; no persistent identifiers are set on your device.

The Site sets no advertising or third-party tracking cookies.

9. Changes

We will update this policy as the Site evolves (for example, if a CMS or additional analytics are introduced) and revise the effective date above.