PRIVACY POLICY
Last updated: October 30, 2025
ACAIS (SAS ASKF) is committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and French data protection laws.
2. Personal Data We Collect and Processing Purposes
We collect and process only the personal data strictly necessary to provide our online training services:
| Data Category |
Purpose |
| Identification
Name, email, phone number |
Account management, course access, customer support |
| Billing
Address, company name (B2B), VAT number |
Invoicing, accounting and tax obligations |
| Payment
Bank details (processed by Stripe) |
Secure payment processing |
| Learning Progress
Courses taken, results, connection time |
Course tracking, certificate issuance |
| Technical Data
IP address, cookies, connection logs |
Security, technical platform operations |
3. Legal Basis for Processing
The processing of your personal data is based on the following legal grounds:
- Contract performance: Processing necessary to provide the training courses you purchased
- Legal obligation: Retention of billing data (10 years)
- Legitimate interest: Platform security, fraud prevention
- Consent: Non-essential cookies, marketing communications (opt-in)
4. Data Recipients
Your data is accessible only to the following persons and entities:
- Authorized ACAIS personnel: Administrative and technical support teams
- Technical subcontractors:
- IONOS: Web hosting (European Union)
- Stripe: Payment processing (PCI-DSS certified)
- Competent authorities: Upon legal request only
We do not sell, rent, or transfer your personal data to third parties for commercial purposes.
5. International Data Transfers
Your data is hosted in the European Union (IONOS). For payment processing, Stripe may process data outside the EU with appropriate safeguards (Standard Contractual Clauses approved by the European Commission).
If you are located outside the European Union and use our services, you consent to the transfer of your data to the EU in accordance with this policy.
6. Data Retention Periods
| Data Type |
Retention Period |
| Active account and course progress |
Duration of contractual relationship + 3 years |
| Billing data |
10 years (legal obligation – French Commercial Code) |
| Prospects / Marketing |
3 years from last contact |
| Connection logs / Security |
12 months |
| Cookies |
Maximum 13 months |
At the end of these periods, your data is securely deleted or anonymized.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- SSL/TLS encryption for all communications
- Secure hosting in certified datacenters (European Union)
- Restricted data access on a need-to-know basis
- Encrypted and secure passwords
- Regular secure backups
- Regular monitoring and security updates
8. Your Rights
Under the GDPR and French data protection laws, you have the following rights:
- Right of access: Obtain a copy of your personal data
- Right to rectification: Correct inaccurate or incomplete data
- Right to erasure: Request deletion of your data (subject to conditions)
- Right to restriction: Limit processing of your data in certain cases
- Right to data portability: Receive your data in a structured format
- Right to object: Object to processing of your data (particularly for marketing)
- Right to withdraw consent: At any time, without affecting the lawfulness of prior processing
Exercising Your Rights
To exercise your rights, contact us at: contact@acais.ai
We will respond within one month of your request. This period may be extended by two additional months for complex requests, in which case we will inform you. Proof of identity may be required to verify your identity.
You also have the right to lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr
9. Cookies
Essential Cookies
Necessary for the platform to function (login, shopping cart, security). They do not require consent.
Non-Essential Cookies
We may use analytics or performance cookies with your prior consent. You can manage your preferences at any time through your browser settings or our cookie banner.
Cookie retention: Maximum 13 months. Your consent is requested every 13 months.
For more information, please see our Cookie Policy.
10. Business Clients (B2B)
For our business clients, we also collect:
- Company name
- SIRET number
- VAT number
- Training coordinator contact details
This data is processed for the performance of the commercial contract and accounting and tax obligations.
11. Minors
Our services are intended for adults (18 years and older). We do not knowingly collect personal data from minors. If we learn that a minor has provided us with data, we will delete it immediately.
12. Privacy Policy Updates
This privacy policy may be modified to reflect legal, regulatory, or operational changes. Any material changes will be notified to you by email and/or via a notice on our platform.
The last update date is indicated at the top of this document.
13. Contact
For any questions about this privacy policy or the processing of your personal data:
For more information about cookies, please see our Cookie Policy or Contact Us.
