This is a courtesy translation. The French version is the legally binding one.
Last updated: August 26, 2026
This document explains what we collect, why, where it is stored, for how long, and how to have it erased. It covers the website organizen.ai and the internal tools we use, including our publishing tool that connects to YouTube.
Data controller: SASU Organizen, 2 Chemin de Thony,
74500 Évian-les-Bains, France. RCS Thonon-les-Bains 932 373 228.
Publication director: Samuel Barbot.
Contact: contact@organizen.ai
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Email address | To send you the audit report you requested and to reply to you | Your request (pre-contractual steps) | 3 years after the last contact |
| Name, company, industry | To tailor the report to your business | Your request (pre-contractual steps) | 3 years after the last contact |
| Phone number (optional) | To call you back, only if you have explicitly authorized it | Your consent | 3 years, or until consent is withdrawn |
| Questionnaire answers | To calculate the numerical estimate | Your request (pre-contractual steps) | 3 years after the last contact |
| Proof of consent to be called | To prove the consent required by law since August 11, 2026 | Legal obligation | 3 years (period required by law) |
You can withdraw a consent at any time, without affecting what was done before.
We set no advertising cookies and resell no data. The site loads no social network pixel and no ad network. It does, however, load its fonts from Google Fonts: your IP address is then transmitted to Google LLC, solely to deliver those files.
To find out which pages and buttons are actually useful, the site records browsing events (page viewed, button clicked, questionnaire started or completed, form submitted). Each event carries the page name, the step name, the language, the domain of the site you came from, and a random identifier specific to your tab, created when the page opens and erased when it closes (sessionStorage, which is not a cookie). No IP address, no email, no name is recorded with these events, and they are neither shared nor combined with any other service. Legal basis: our legitimate interest in understanding how the site is used. Retention: 13 months, then deletion.
We run a publishing tool (Postiz, self-hosted) that, at the explicit request of a channel owner, connects to YouTube through Google APIs. This access is used exclusively to publish and measure videos of our own brands and those of our clients who entrust their management to us.
Our use of data received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.
Authorization tokens and channel data are stored in the database of our own server, located in Paris, France. They do not leave that machine, which is accessible only through our administration account, by key and without a password. The database is not exposed to the internet.
We would rather say it than let you assume otherwise: these tokens are not encrypted in the database. That is how the tool we use works, and it is the reason access to that machine is kept to the strict minimum. If this concerns you, withdraw access: the token becomes unusable immediately.
You can withdraw access at any time, without asking us, from myaccount.google.com/permissions. Withdrawal is immediate. To have us also erase what was recorded on our side, write to contact@organizen.ai: deletion within 30 days.
We only use providers necessary for the operation of the service:
| Provider | Role | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting and delivery of the site | USA, global network |
| Supabase | Database of audit requests and proofs of consent | USA (California) |
| Resend | Sending emails | European Union (Ireland) |
| Hostinger | Server for our internal tools, including the publishing tool | France (Paris) |
| Google LLC | YouTube API, with the channel owner’s authorization, and the site’s fonts | USA |
Transfers outside the European Union rely on the standard contractual clauses of the European Commission.
Under the GDPR (RGPD), you have the right to access, rectify, erase, restrict, object to, and port your data. One single address to exercise them: contact@organizen.ai. We reply within 30 days.
If our response does not satisfy you, you can lodge a complaint with the CNIL, 3 place de Fontenoy, 75007 Paris, cnil.fr.
Communications with the site and our tools go through HTTPS. The access keys to our providers are kept outside any code repository, in a local vault, and are known only to the administration account. Servers can only be accessed by key, never by password. Public forms are protected against automated submissions. In the event of a data breach presenting a risk to your rights, we will notify you and notify the CNIL within 72 hours.
Any change to this document is published on this page, with its date. A change that would broaden the use of your data would be announced to you by email before taking effect.
Organizen (SASU, France) collects the contact details and questionnaire answers you submit on organizen.ai in order to produce and send the free audit you asked for, and keeps them for three years after our last contact. We set no advertising cookies and sell no data.
Our self-hosted publishing tool connects to YouTube, with the channel owner’s explicit authorisation, in order to upload videos, read the channel name and identifier, and read video statistics. Google user data is never sold, never used for advertising, and never used to train any AI model. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Tokens are stored on our own server in Paris, France, on a machine reachable only by our administration key; they are not encrypted in the database, which is why access to that machine is kept to a strict minimum. You can revoke access at any time at myaccount.google.com/permissions, and request deletion of stored data by writing to contact@organizen.ai (done within 30 days).