Last updated: 26 October 2026
Privacy policy
This policy explains how Synapse Photonics SAS collects and uses personal data when you visit synapse-photonics.com, contact us or request an AI Value Briefing. We apply the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the French Data Protection Act (loi n° 78-17 du 6 janvier 1978, "Informatique et Libertés").
1. Who is responsible for your data
The data controller is Synapse Photonics SAS, a French simplified joint-stock company (société par actions simplifiée) with share capital of EUR 40,000, registered with the Grasse Trade and Companies Register (RCS Grasse) under number 106 579 493, with its registered office at 535 route des Lucioles, Bâtiment 3, 06560 Valbonne (Sophia Antipolis), France. It operates two activities on this site: Synapse Fusion (AI consulting) and Synapse Photonics.
For any question about your personal data or to exercise your rights, write to jacques@synapse-photonics.com or by post to the address above. We have not appointed a data protection officer, as the law does not require one for our activities; the address above is our privacy contact.
2. What we collect, why, on what legal basis and for how long
| Purpose | Data | Legal basis (GDPR Art. 6) | How long we keep it |
|---|---|---|---|
| Answering a briefing request made through our form or by email, and arranging a meeting | Name, work email, organisation, role, country, organisation size, sector, the topic and message you write, how you heard about us | Your consent, given by ticking the box on the form (Art. 6(1)(a)); for emails you send us, our legitimate interest in replying (Art. 6(1)(f)) | Up to 24 months after our last exchange, unless a business relationship follows |
| Preparing and performing an engagement with your organisation | Business contact details of the people we work with, correspondence, contract and invoicing records | Steps taken at your request before a contract, and performance of the contract (Art. 6(1)(b)); legal obligations (Art. 6(1)(c)) | For the duration of the relationship, then 5 years for contract records; accounting and invoicing documents for 10 years, as French law requires |
| Running and securing the website | Technical data your browser sends: IP address, browser type, pages requested, date and time | Our legitimate interest in providing a working, secure website (Art. 6(1)(f)) | Kept by our hosting provider for a short period under its own retention rules |
| Displaying the site's typefaces | Your IP address and browser details, sent to Google when your browser loads the fonts from Google Fonts | Our legitimate interest in a consistent, readable design (Art. 6(1)(f)) | Under Google's retention rules; we receive none of this data |
We do not use your data for automated decision-making or profiling, we do not sell it, and we do not share it with third parties for their own marketing. We send no newsletters or marketing emails unless you have asked for them.
3. Cookies and tracking
This website does not set cookies and uses no advertising, analytics or social-media trackers, so no cookie banner is needed. Any visit statistics we look at come from our hosting provider's server records, which do not use cookies.
4. Who receives your data
Only Jacques Mouton, our founder, and, where needed for an engagement, the people working on it. We use the following service providers (processors), bound by contract to protect your data and to use it only on our instructions:
- Google (Google Workspace email and storage; Google Fonts for the typefaces).
- Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA, which hosts this website.
- Anthropic (Anthropic PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA, and Anthropic Ireland, Limited, Dublin), whose AI assistant Claude we use under its commercial terms to help prepare our work, for example drafting replies and documents. Under those terms it does not train its models on our content.
When we coach your teams, the work runs in your organisation's own AI tools (for example Claude, Microsoft Copilot or Google Gemini). Those tools process your data under your organisation's own agreement with that provider, not under ours.
We may also disclose data where the law requires it, for example to a court or a public authority.
5. Transfers outside the European Union
Google and Netlify may process data in the United States. These transfers rely on the EU-U.S. Data Privacy Framework, under which both companies state that they participate, and on the European Commission's standard contractual clauses (Decision (EU) 2021/914). Anthropic may also process data in the United States; its privacy policy states that it relies on standard contractual clauses for such transfers. You can ask us for more information about these safeguards.
6. Your rights
Under the GDPR and French law you have the right to:
- access your data and receive a copy;
- have inaccurate data corrected;
- have your data erased;
- restrict how we use it;
- object to processing based on our legitimate interest;
- receive data you gave us in a portable format;
- withdraw your consent at any time, without affecting what was done before;
- give instructions on what happens to your data after your death (French Data Protection Act, Article 85).
Write to jacques@synapse-photonics.com. We reply within one month. We may ask for proof of identity if we have a reasonable doubt about who is making the request.
If you believe your rights have not been respected, you can complain to the French data protection authority: Commission Nationale de l'Informatique et des Libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.
7. Security
We protect personal data with appropriate technical and organisational measures, including encrypted connections (HTTPS) to this site, access limited to the people who need it, and two-step verification on our accounts.
8. Changes to this policy
We may update this policy. The date at the top shows the latest version. Significant changes will be shown on this page.