Privacy policy

Trame AI (SASU, RCS Nanterre 109 389 411), represented by Vincent Tourret, President. Contact: contact@trameai.com.

The form sends your request to Trame AI's server, which stores it in Trame AI's in-house tool (Supabase database, European Union, Ireland). A person at Trame AI reads it, then decides whether or not to follow up. If they do, your request and contact details are copied into our CRM (Attio); nothing goes in without that decision.

If sending fails, the form offers to send the same request by email to contact@trameai.com. It then reaches us as an ordinary email, in our business mailbox (Microsoft 365), like any message you write to us directly.

The information in your request is used to respond to it: to review it, get back to you and, if we work together, prepare a proposal. It is never sold or transferred.

Your optional answer to the question “How did you hear about Trame AI?” is also used to learn, in aggregate, through which channels people find us.

To help us sort requests, a simple calculation, without artificial intelligence, uses the fields you filled in to estimate each request's priority and to flag those that look automated. This calculation decides nothing: every request is read by a person, and no decision about you is made solely by automated means.

Responding to your request is based on steps taken at your request prior to entering into a contract (Article 6(1)(b) of the GDPR). No checkbox is therefore required: sending your request is enough.

Counting, in aggregate, the channels through which people find us is based on Trame AI's legitimate interest in knowing how it is discovered (Article 6(1)(f) of the GDPR). You may leave this question unanswered.

Protecting the form against automated submissions is based on Trame AI's legitimate interest in securing its site (same article, point (f)): the server limits the number of submissions per connection, without storing your IP address (see “Data collected”).

The form collects only what you choose to send:

• — identity: first and last name;
• — contact details: email address, and phone and company if you provide them;
• — what you need: context, problem to solve, timeline;
• — the service you are interested in, if you chose one on the page;
• — how you heard about Trame AI, if you answer that question;
• — technical data about the submission: the time the form was displayed, a random identifier generated by your browser (so that a double submission creates only one request) and the version of the information shown under the form, which records what was presented to you.

Your IP address is not stored with your request. To limit the number of submissions per connection, the server keeps only a fingerprint of it, recalculated every day, in memory and for that day only.

No sensitive data is requested. Please do not send confidential information or trade secrets through this form.

Within Trame AI, your information is read only by the people responsible for replying to you: currently, Vincent Tourret, President of Trame AI. It is not shared with any third party, other than the technical providers listed below.

These providers process data on Trame AI's behalf, following its instructions and for these purposes only:

• — Hostinger: hosting of the site and of Trame AI's server, which receives your request (Hostinger International Ltd, Cyprus; server located in France);
• — Supabase: database of Trame AI's in-house tool, where your request is stored on arrival, and which mirrors the CRM records (Supabase Pte. Ltd, Singapore; data hosted in the European Union, in Ireland);
• — Microsoft: the mailbox we reply from, where the emails you write to us arrive, and Teams, where the team is notified that a request has arrived and discusses it (data stored in the European Union, under Microsoft's “EU Data Boundary” commitment);
• — Attio: customer relationship management tool (CRM), where your request and contact details are copied if we follow up, and where our email exchanges may be picked up by the sync of our mailbox (Attio Limited, United Kingdom; data hosted in the European Union);
• — Anthropic: the team's in-house assistant, which may read CRM records to help prepare our conversations (Anthropic Ireland, Limited; processing in the United States and other countries);
• — TypeSafe: an in-house tool that helps route the team's questions and match CRM records, and may see your name when a message mentions it (TypeSafe AI, Inc.; processing in the United States);
• — OpenRouter: access to the models of one of the team's in-house agents, which may read CRM records; each request is passed on to the model provider (OpenRouter, Inc.; processing in the United States).

When a provider processes data outside the European Union (Anthropic, TypeSafe and OpenRouter, and occasionally Supabase and Microsoft), the transfer is covered by the standard contractual clauses adopted by the European Commission; Microsoft is also certified under the EU–U.S. Data Privacy Framework. The United Kingdom, where Attio is established, benefits from an adequacy decision of the European Commission; Attio's providers outside Europe are covered by the same standard contractual clauses.

• — Your request is kept in the in-house tool for 30 days after we decide whether or not to follow up. After that, only a line without your contact details or message remains (its reference, dates, status and, if we followed up, the link to the CRM record). If no decision is made, it is deleted at the latest 12 months after it was received.
• — A request set aside as unwanted (spam, automated submission), by our sorting or by a person, is deleted 30 days after being set aside. A submission rejected by the form (incomplete, too many, or identified as automated) is not kept.
• — An email you write to us directly follows the same periods in our mailbox: at most 30 days after our decision, at most 12 months without a decision. If it was copied into our CRM, it follows the CRM period below.
• — If we follow up, your contact details and the history of our exchanges are kept in our CRM. Without a business relationship, they are deleted 3 years after our last contact.
• — For the site's security, the server keeps a technical log of connections (date, page requested, truncated IP address). This log is kept for 14 days; it is based on Trame AI's legitimate interest in protecting its site (Article 6(1)(f) of the GDPR).
• — Some technical copies are not erased one by one, but with their own retention period: the nightly backup of requests on Trame AI's server, kept for 14 days; the recovery bin of our mailbox, 14 days; Anthropic's logs, 30 days; TypeSafe's, as long as the service requires, under its terms; OpenRouter does not keep the content of requests, and model providers apply their own rules; the history of the team's Teams messages, until we delete it; Attio's and Microsoft's own backups, under their rules.

Under the GDPR, you have the right to access, rectify and erase your data, the right to restrict processing and the right to data portability. You may also object to processing based on our legitimate interest (aggregate count of channels, technical logs) and set instructions for what happens to your data after your death.

To exercise these rights, write to contact@trameai.com. You will receive a reply within one month. You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

This site sets no cookies and uses no audience-measurement or advertising trackers. To bring you back to the right place when you go back, your browser keeps the scroll position for the duration of your visit (session storage): it stays on your device and is never sent anywhere.