Privacy Policy

Established in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of January 6, 1978 as amended.
In force as of September 23, 2026

PREAMBLE

The company KOTEN AI (hereinafter « KOTEN AI », « we » or « the Company ») attaches particular importance to the protection of personal data of its users and prospects (hereinafter « you » or « the User »). The purpose of this Privacy Policy is to inform you, in a complete and transparent manner, of the conditions under which KOTEN AI collects, processes and retains your personal data in connection with the use of the website https://kotenai.com (hereinafter « the Site »).

KOTEN AI acts as data controller within the meaning of Article 4(7) of the GDPR.

ARTICLE 1 — IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

KOTEN AI — Société par Actions Simplifiée

Headquarters: 59 rue de Ponthieu, 75008 Paris
SIRET : 130 137 490 000 12
Legal Representative: Monsieur Fayçal HAMOUDI, President
Contact : faycal@kotenai.com

KOTEN AI has not appointed a formally designated Data Protection Officer (DPO), this obligation not being applicable at this stage of its development pursuant to Article 37 of the GDPR. Any questions regarding the protection of your personal data may nevertheless be addressed to the aforementioned contact email.

ARTICLE 2 — DATA COLLECTED AND PURPOSES OF PROCESSING

2.1 — Data collected via the contact form

When you contact us via the form available on the Site or by email, KOTEN AI collects the following data:

Your email address;
The content of your message;
Where applicable, your name, first name and professional title if you communicate them voluntarily.

Legal basis: execution of pre-contractual measures taken at your request (Article 6(1)(b) of the GDPR) or legitimate interest of KOTEN AI in answering incoming requests (Article 6(1)(f) of the GDPR).

Purpose: responding to your requests for information, demonstration or quotes regarding the services offered by KOTEN AI.

2.2 — Data collected via the secure demo

Access to the online demonstration of the KOTEN AI product is protected by an individual access code sent electronically. On this occasion, KOTEN AI collects:

The email address to which the access code was sent;
Connection data for security purposes (timestamp, IP address).

Legal basis: legitimate interest of KOTEN AI in securing access to its proprietary tools (Article 6(1)(f) of the GDPR).

2.3 — Navigation and technical data

During your navigation on the Site, KOTEN AI may automatically collect technical data strictly necessary for its operation, in particular IP address, browser type, pages visited and visit duration. These data are collected exclusively for technical and security purposes. No audience measurement or behavioral tracking tool is deployed on the Site to date.

Legal basis: legitimate interest of KOTEN AI in ensuring the security and proper technical operation of the Site (Article 6(1)(f) of the GDPR).

ARTICLE 3 — DATA RECIPIENTS

The personal data collected is intended solely for authorized members of the KOTEN AI team within the strict framework of the purposes described in Article 2.

KOTEN AI uses the following technical subcontractors, subject to strict contractual obligations in accordance with Article 28 of the GDPR:

Vercel Inc. (frontend hosting)

Framework: standard contractual clauses approved by the European Commission.

Google LLC — Google Cloud Platform (infrastructure hosting)

Framework: standard contractual clauses approved by the European Commission and supplementary protection mechanisms.

KOTEN AI formally undertakes never to assign, sell, rent or communicate your personal data to third parties for commercial, advertising or unsolicited prospecting purposes.

ARTICLE 4 — TRANSFERS OUTSIDE THE EUROPEAN UNION

The hosting providers mentioned in Article 3 are established in the United States of America. Data transfers to these entities are governed by the standard contractual clauses adopted by the European Commission in accordance with Article 46 of the GDPR, ensuring a level of protection equivalent to that applicable within the European Union.

ARTICLE 5 — DATA RETENTION PERIOD

KOTEN AI applies the following retention periods, in accordance with the principle of storage limitation set out in Article 5(1)(e) of the GDPR:

Data from contact forms and commercial exchanges: three (3) years from the last contact, in accordance with CNIL recommendations on B2B prospecting;
Connection and navigation logs for security purposes: twelve (12) months from their collection;
Data relating to demo access codes: six (6) months from their issuance.

At the end of these periods, the data is irreversibly deleted or anonymized.

ARTICLE 6 — YOUR RIGHTS

In accordance with Articles 15 to 22 of the GDPR and the French Data Protection Act, you have the following rights:

Right of access (Art. 15 GDPR): obtain confirmation of processing and a copy of your data;

Right of rectification (Art. 16 GDPR): correct inaccurate or incomplete data;

Right to erasure (Art. 17 GDPR): request data deletion subject to legal retention duties;

Right to restriction (Art. 18 GDPR): request temporary suspension of processing;

Right to data portability (Art. 20 GDPR): receive your data in a structured, machine-readable format;

Right to object (Art. 21 GDPR): object to processing based on legitimate interest;

To exercise any of these rights, send your written request to:

faycal@kotenai.com

KOTEN AI undertakes to respond within a maximum period of one (1) month from receipt of your request, which may be extended by two (2) additional months in case of complexity, after prior notification.

If you consider that the processing of your data does not comply with applicable regulations, you have the right to lodge a complaint with the French data protection authority (CNIL):

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Website: https://www.cnil.fr

ARTICLE 7 — DATA SECURITY

KOTEN AI implements appropriate technical and organizational measures to ensure the security, integrity and confidentiality of your data, in accordance with Article 32 of the GDPR. These measures include, in particular, the encryption of communications using the TLS protocol, strict access control to information systems and access traceability.

In the event of a personal data breach likely to result in a risk to your rights and freedoms, KOTEN AI undertakes to notify this breach to the CNIL within the legal time limits prescribed by Article 33 of the GDPR and, where applicable, to inform you in accordance with Article 34 of the GDPR.

ARTICLE 8 — COOKIES

The Site only uses cookies strictly necessary for its operation (session cookies, security cookies). These cookies do not require your prior consent in accordance with Article 82 of the French Data Protection Act and CNIL guidelines of September 17, 2020.

No audience measurement, advertising tracking, social network or profiling cookie is deposited on your terminal. KOTEN AI undertakes to inform you of any substantial change to its cookies policy.

ARTICLE 9 — POLICY MODIFICATIONS

KOTEN AI reserves the right to modify this Policy at any time in order to reflect changes in its practices or applicable regulations. The version in force is the one published on the Site at the date of your consultation. In the event of substantial modification, KOTEN AI will endeavor to inform you by any appropriate means.

ARTICLE 10 — APPLICABLE LAW

This Policy is governed by French law and European Union law. Any dispute relating to its interpretation or execution falls under the jurisdiction of the competent French courts.

Last updated: 23 septembre 2026
KOTEN AI — 59 rue de Ponthieu, 75008 Paris — faycal@kotenai.com