Privacy policy

1. Who is responsible for your data

UNQ, société par actions simplifiée (SAS), a French simplified joint-stock company with a share capital of €10,000, registered with the RCS Grenoble 104 967 930 (Grenoble Trade and Companies Register), whose registered office is at 9 avenue Hector Berlioz, 38170 Seyssinet-Pariset, France, is the controller of the processing described in sections 3 to 5.

For the conversations of the advisor installed on a brand’s website (section 6), the brand is the controller, and UNQ acts as its processor.

UNQ has not appointed a data protection officer. For any question about your data, write to rgpd@unq.you.

2. What this policy covers

This policy concerns four groups of people:

• visitors to the unq.pro and unq.you websites (the “Sites”);
• people who request a demo using the unq.pro form;
• members of client brands who use the brand space, and the UNQ team who use the back office;
• visitors to a brand’s website who talk with the advisor UNQ installs there. For them, UNQ acts on behalf of the brand: section 6 describes what UNQ does with their data, and the brand’s own privacy policy also applies.

3. Visitors to the unq.pro and unq.you websites

What the Sites do not do

The Sites use no audience measurement tool, no advertising tracker and no social media sharing button. They load no content hosted by a third party: their fonts, images and videos are served by UNQ. This is why they do not ask for your consent: no tracker on them requires it.

Technical logs

Like any web server, the infrastructure hosting the Sites records technical logs for each request: IP address, date and time, page requested, browser used. They are used to keep the Sites secure and working properly, on the basis of UNQ’s legitimate interest.

If you have an open session on the brand space

When a page opens, unq.pro asks UNQ’s server whether a session is open, in order to display a direct link to your space. If someone has logged in to the brand space from this browser, the browser then presents the session cookie set at that login (see section 10). This cookie only exists after logging in to the brand space, never merely because you visited the Sites.

4. Demo requests

Data collected

The demo request form collects your first name, last name, work email address, the name of your brand and, if you provide them, the address of its website and a message.

Purpose and legal basis

This data is used to answer your request, organise the demonstration and follow up on the business relationship that may result. This processing is based on the pre-contractual measures taken at your request and, for the commercial follow-up, on UNQ’s legitimate interest in developing its business with brands.

What happens to your request

The form does not store your request in a database. When you send it, two emails go out through Brevo: one forwards your request to the UNQ team’s inbox, the other acknowledges receipt to you. If a conversation begins, the team may record your contact details in its sales follow-up tool.

To limit abusive submissions, your IP address is kept for one minute when you send the form.

5. Brand space and back-office accounts

Data collected

• your identity: first name, last name, email address, phone number if you provide it;
• your login methods: a hash of your password (never the password itself), the secret for two-factor authentication, login keys saved on your devices (Face ID, fingerprint), the identifier of your external account if you log in with one;
• your roles and the brands you belong to;
• your sessions: IP address, browser, login dates;
• a log of sensitive actions: email address, IP address, browser, action performed;
• what you enter: your brand’s file, the documents you upload, the messages exchanged with the writing assistant, the advisors’ profiles, your support requests, your feedback on getting started.

Purposes and legal bases

• giving you access to the brand space and managing your permissions, to perform the contract between your brand and UNQ;
• securing accounts and keeping a record of sensitive actions, on the basis of UNQ’s legitimate interest and its security obligation;
• preparing your brand’s file with the help of artificial intelligence, and answering your support requests, to perform that same contract;
• improving the service based on your feedback, on the basis of UNQ’s legitimate interest.

For invitations, password resets and notifications, UNQ writes to you through Brevo.

6. Visitors who talk to a brand’s advisor

Who decides

When a brand installs UNQ’s advisor on its website, it decides what data is collected from its visitors and how it is used: it is the controller. UNQ acts as its processor: it processes this data on the brand’s behalf, according to its instructions, under the contract between them.

Data processed for the brand

• the conversation: your messages, the advisor’s replies, the page from which you opened it, and what the conversation reveals about your project (pieces, style, budget, for example);
• the photos and files you attach;
• your voice messages, if you speak to the advisor: the recording is used to produce the text of your message, then deleted;
• if you log in to find your conversations again: your email address, your name, and your login method (a code received by email, an external account or a key saved on your device);
• if you are logged in on the brand’s website, the identity information it passes to the advisor (customer ID, name, email, phone);
• if you ask to be contacted or book an appointment: your contact details, your notes and the appointment preparation file, and the notes the brand’s human advisor takes on that occasion;
• visit information: country, device type, the site you came from, and a random identifier kept in your browser (see section 10);
• the sales the brand links to the conversation: order reference, amount, products.

Purposes

This data is used to advise you, to resume a conversation where you left off, to pass your contact or appointment request on to the brand and, for the brand, to measure what the advisor brings. The legal basis for each of these uses is set by the brand, in its own privacy policy.

Your rights

You exercise your rights over this data with the brand. If you write to UNQ about it, at rgpd@unq.you, UNQ forwards your request to the brand and helps it respond.

7. An advisor powered by artificial intelligence

The advisor installed on a brand’s website is an artificial intelligence, and it says so: every conversation carries the mention « Conseil par IA » (“AI advice”), together with « Powered by UNQ » when the brand displays it. No human advisor replies in the conversation; a human advisor from the brand may meet you at an appointment that the AI offers you.

Its replies are generated automatically, from the brand’s catalogue and content, by Mistral AI’s models. They may contain errors: check any decisive information on the product page before buying. The advisor makes no decision that produces legal effects concerning you.

Avoid sharing sensitive information with it (health, bank details, opinions, for example), which it does not need.

8. Recipients and processors

Your data is accessible only to the people at UNQ who need it for their work. Members of the same brand see their team list; the conversations, contacts and appointments of a brand’s visitors are visible only to that brand, to the UNQ team and to the people the brand chooses to share them with. UNQ does not sell any personal data.

UNQ uses the following service providers:

• alva.do, operator of the cluster that runs the Sites and the platform, on servers of OVH SAS located in France;
• Mistral AI (France), artificial intelligence: the advisor’s replies, analysis of attached photos, transcription of voice messages, content of the brand file and uploaded documents; processing in France;
• Brevo (France), sending emails: login codes, invitations, notifications, follow-ups, acknowledgements of receipt, from the address contact@email.unq.you; storage and access locations: to be determined.

When a brand connects its own tools to the advisor (its calendar, its CRM, its online store), UNQ passes them the necessary data on its instruction: these tools are chosen by the brand, and fall under its privacy policy.

9. Retention periods

The periods below are those currently applied by the platform’s automatic deletions. Those still “to be determined” will be set and applied soon; this page will then be updated.

10. Session cookie and local storage

On the Sites

The Sites do not set a single cookie. The only thing they write to your browser’s storage is one preference: that you closed the banner offering another language (key unq:banniere-langue, with no expiry, which you can clear from your browser). The only cookie they may read is the brand space one, described below.

On the brand space

A session cookie, unq_refresh_token, is set when you log in. Inaccessible to the page’s scripts, it keeps you logged in for 30 days, renewed with each use. It is strictly necessary for your authentication and does not require your consent.

In the advisor installed on a brand’s website

The advisor sets no cookie. It writes to your browser’s local storage, separately for each brand:

• a random identifier, which lets you resume your conversation when you come back. It contains no information about you and stays in your browser until you clear the site’s data; its maximum lifetime is to be determined;
• if you log in: a session token and your email address, erased when you log out;
• the date it last asked for your feedback, so as not to ask you again too often.

This information is used for the operation of the advisor of the brand whose website you are visiting. It cannot be used to follow you from one site to another: each brand has its own, in the storage of its own website.

11. Security

UNQ protects your data with appropriate measures: encrypted exchanges, access restricted to authorised people, two-factor authentication available on the brand space, a check that a new password does not appear in a known breach, without ever sending it, and a log of sensitive actions.

12. Your rights

Regarding the data that concerns you, you have the right:

• of access;
• to rectification;
• to erasure;
• to object, in particular to commercial follow-up;
• to restriction of processing;
• to data portability;
• to set instructions on what happens to your data after your death.

For data for which UNQ is the controller (sections 3 to 5), write to rgpd@unq.you. UNQ will reply within one month, which may be extended by two months for a complex request; UNQ will then inform you. Proof of identity may be requested if there is reasonable doubt about your identity.

For your exchanges with a brand’s advisor (section 6), contact the brand; UNQ forwards to it any request received on the subject.

If you believe your rights are not being respected, you can lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), the French data protection authority, at www.cnil.fr.

13. Contact

For any question about your data: rgpd@unq.you. By post: UNQ, 9 avenue Hector Berlioz, 38170 Seyssinet-Pariset, France. For any other question: contact@unq.you.

14. Changes to this policy

UNQ may change this policy, in particular to reflect changes in its services or in the law. The date of the last update is shown at the top of the page.