GDPR

Privacy policy.

Confidentiality is not a promise: it is a structural constraint of the platform.

Data controller

Brainmood, SAS, 16 rue Cuvier, 69006 Lyon, represented by its founding team.

Personal data contact: contact@brainmood.fr

The founding principle: no individual reading

Responses collected via the Brainmood platform are pseudonymous, with no nominative profile. Readouts are exclusively aggregated, above a minimum threshold: no individual reading, neither for the employer nor for Brainmood.

  • Pseudonymous collection : no nominative profile is created during measurement campaigns.
  • Anti-reidentification thresholds : no result is displayed for a group too small to guarantee anonymity.
  • Confidentiality of support work : no individual information is shared with the client company's management without the explicit consent of the person concerned.

Data collected via the site

  • Contact form : last name, first name, work email address, company, position, message.
  • Application form : last name, first name, email address, phone, résumé, cover letter, message.
  • Technical data : IP address, for security and abuse-limitation purposes only.

Purposes and legal bases

  • Consent (art. 6.1.a GDPR) : contact and application forms.
  • Legitimate interest (art. 6.1.f) : site security, spam protection.
  • Pre-contractual measures (art. 6.1.b) : processing requests with a view to possible support work.

Recipients and processors

Your data is intended exclusively for the Brainmood team. It is never sold, rented or shared for commercial purposes. Technical processors: Vercel Inc. (hosting) and Resend Inc. (transactional emails), United States. Transfers governed by the European Commission's standard contractual clauses (SCC), in accordance with article 46.2 of the GDPR.

Retention periods

  • Contact data : 3 years from the last contact.
  • Application data : 2 years from receipt, unless you object.
  • Technical data (IP) : 12 months maximum.

Beyond these periods, data is deleted or irreversibly anonymized.

Your rights (articles 15 to 22 of the GDPR)

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time. To exercise them: contact@brainmood.fr (reply within 30 days).

Complaints may be lodged with the CNIL : 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 · 01 53 73 22 22 · cnil.fr

Cookies

This site only uses technical cookies strictly necessary for its operation. No advertising, profiling or tracking cookie is set. An information banner is displayed on your first visit. Your choice is stored locally in your browser (localStorage), with no transmission to third-party servers.

Data security

  • Encrypted communications (HTTPS/TLS)
  • Security headers (CSP, HSTS, X-Frame-Options)
  • Request rate limiting
  • Validation and sanitization of user input
  • Data access restricted on a need-to-know basis

Updates

Brainmood reserves the right to modify this policy at any time. The online version prevails. Last updated: May 7, 2026.