Privacy policy.
Confidentiality is not a promise: it is a structural constraint of the platform.
Data controller
Brainmood, SAS, 16 rue Cuvier, 69006 Lyon, represented by its founding team.
Personal data contact: contact@brainmood.fr
The founding principle: no individual reading
Responses collected via the Brainmood platform are pseudonymous, with no nominative profile. Readouts are exclusively aggregated, above a minimum threshold: no individual reading, neither for the employer nor for Brainmood.
- Pseudonymous collection : no nominative profile is created during measurement campaigns.
- Anti-reidentification thresholds : no result is displayed below the defined threshold. This threshold reduces reidentification risk without, by itself, guaranteeing protection against every form of cross-referencing.
- Confidentiality of support work : no individual information is shared with the client company's management without the explicit consent of the person concerned.
Data collected via the site
- Contact form : last name, first name, work email address, company, position, message.
- Introduction to Skello : first name, last name, work email address, phone, company, number of employees, business sector, optional message.
- Application form : last name, first name, email address, phone, résumé, cover letter, message.
- Toolkit access : email address and selected language, to send you the file access link and notify the Brainmood team of the request. Access is kept in a cookie for up to 30 days; no marketing subscription is created.
- Technical and navigation data : request, browser and page-view information used for security, traffic measurement and performance; see the Cookies section below.
Purposes and legal bases
- Consent (art. 6.1.a GDPR) : contact and application forms; introduction to a partner (Skello), with explicit consent; Google measurement cookies allowed through the banner.
- Legitimate interest (art. 6.1.f) : site security, spam protection.
- Pre-contractual measures (art. 6.1.b) : processing requests with a view to possible support work.
Recipients and processors
The Brainmood team handles requests received through the forms. Technical services involved include Vercel (hosting, traffic and performance), Resend (transactional emails), Cloudflare (protection of the forms against bots), Cal.com (demo booking) and Google (tag management and traffic measurement). These services may process data outside the European Economic Area. Contact us for details of recipients and applicable contractual safeguards.
Skello : if you ask to be introduced to Skello and tick the form’s consent box (unticked by default), the Brainmood team passes the information from that form on to Skello so that Skello can contact you. Skello then processes it on its own behalf, as a controller, under its own privacy policy. Without this consent, nothing is passed on.
Cloudflare Turnstile : to protect the site’s forms against automated submissions by bots, a Cloudflare Turnstile check runs when each form is displayed, then when it is sent. It processes technical signals from your connection and browser, such as the IP address, TLS fingerprint and User-Agent header, along with the site’s key and address. The content of the forms is not sent to Cloudflare. Cloudflare, Inc. acts as Brainmood’s processor for this check. According to its policy, Cloudflare also uses these signals, as a controller, to improve its bot detection. Cloudflare privacy policy · Turnstile addendum.
Cal.com : the demo booking page embeds the Cal.com, Inc. calendar. The information entered to book (name, email address, phone number and answers to the booking form) is processed by Cal.com, as Brainmood’s processor, to record the meeting and send the confirmation. If you have accepted measurement cookies, the page also passes on where the visit came from, as values taken from fixed lists (source category, link type, campaign set up by Brainmood, site button): never the page address, free text or an identifier. The calendar sets no measurement cookie: it uses a Cloudflare security cookie and remembers the time slot being booked. Cal.com privacy policy.
Retention periods
- Contact data : 3 years from the last contact.
- Introduction data (Skello) : at Brainmood, 3 years from the last contact, like contact data. They are passed on to Skello once, and Skello keeps them under its own policy.
- Application data : 2 years from receipt, unless you object.
- Technical data (IP) : 12 months maximum.
Beyond these periods, data is deleted or irreversibly anonymized.
Your rights (articles 15 to 22 of the GDPR)
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time. To exercise them: contact@brainmood.fr (reply within 30 days).
Complaints may be lodged with the CNIL : 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 · 01 53 73 22 22 · cnil.fr
Cookies and site measurement
Google Analytics, loaded through Google Tag Manager, measures traffic and journeys on this site. Measurement cookies are denied by default and allowed after you agree. Journey events added by Brainmood cover calls to action, downloads, form starts and confirmed submissions. They send only predefined categories: no name, email, company or form text is included in these events.
Google Tag Manager loads when the site opens. In the advanced consent mode used here, Google may receive technical signals without measurement cookies before you agree or after you decline, such as consent status, timestamps, browser information and the referring page. Declining cookies therefore does not block all communication with Google. Advertising storage, advertising data use and ad personalization remain denied.
Vercel Web Analytics measures traffic and Speed Insights measures loading performance. These tools operate separately from the Google cookie choice and may send technical and navigation information to Vercel even when you decline Google cookies.
Your choice is stored in your browser and communicated to Google to adjust its tags. ‘Manage cookies’, in the footer of every page, lets you change it at any time, including declining after accepting. Withdrawal applies to future collection and does not erase measurements already sent.
If your browser prevents this choice from being saved, Google measurement cookies remain declined on the current page and a message lets you know. Your browser settings let you remove existing cookies or saved preferences.
For details of the settings and retention periods currently applied to traffic and performance measurements, contact contact@brainmood.fr.
Service documentation: Google Consent Mode · Vercel Web Analytics · Vercel Speed Insights.
CNIL: withdrawing cookie consent (in French).
Data security
- Encrypted communications (HTTPS/TLS)
- Browser security headers
- Protection against abusive requests
- Checks on data entered in forms
- Data access restricted on a need-to-know basis
Updates
Brainmood reserves the right to modify this policy at any time. The online version prevails. Last updated: October 21, 2026.