Personal data
Privacy policy
Last updated : 23 October 2026
This English version is provided for convenience. In case of discrepancy, the French version prevails.
1. Who is responsible for your data
HUMN Studio is published by SJC GROUPE, 7 rue des Néfliers, 85590 Treize-Vents, France (La Roche-sur-Yon Trade and Companies Register 879 327 930). Contact for any question about your data: hello@humn-studio.com.
Depending on the data, HUMN Studio has two roles:
- Controller for the data of its own customers and users: account, subscription, billing, support, beta sign-up.
- Processor for the data its customers entrust to it to run their business: audience measurement of their website, statistics and reviews of their Google and Meta pages, forms and bookings received by their HUMN websites. For this data, the customer business is the controller: its own privacy policy applies, and HUMN Studio acts only on its instructions.
2. Data processed, purposes and legal bases
- Data
- Account: name, email address, password (stored as an irreversible hash), organization, role
- Why
- Create and secure your access, manage the members of an organization
- Legal basis
- Performance of the contract
- Data
- Subscription and billing: plan, invoices, Stripe customer ID. Card numbers are entered at Stripe and never received by HUMN Studio
- Why
- Invoice, manage the subscription, partner seats and commissions
- Legal basis
- Performance of the contract, legal accounting obligations
- Data
- Business content: brief, objectives, actions, websites, posts, images
- Why
- Provide the steering service and the web Studio
- Legal basis
- Performance of the contract
- Data
- Data from the Google and Meta accounts you connect (§ 4)
- Why
- Show your statistics and reviews, publish or reply at your request
- Legal basis
- Performance of the contract
- Data
- Questions asked to the AI agents and the business's figures
- Why
- Produce analyses and recommendations (§ 5)
- Legal basis
- Performance of the contract
- Data
- Beta access request: name, email, company, message
- Why
- Contact you about HUMN Studio
- Legal basis
- Your consent
- Data
- Technical logs and abuse protection (hashed IP address)
- Why
- Service security, fraud prevention
- Legal basis
- Legitimate interest
- Data
- Service emails (alerts, invitations, negative reviews)
- Why
- Inform you of an event in your business
- Legal basis
- Performance of the contract
| Data | Why | Legal basis |
|---|---|---|
| Account: name, email address, password (stored as an irreversible hash), organization, role | Create and secure your access, manage the members of an organization | Performance of the contract |
| Subscription and billing: plan, invoices, Stripe customer ID. Card numbers are entered at Stripe and never received by HUMN Studio | Invoice, manage the subscription, partner seats and commissions | Performance of the contract, legal accounting obligations |
| Business content: brief, objectives, actions, websites, posts, images | Provide the steering service and the web Studio | Performance of the contract |
| Data from the Google and Meta accounts you connect (§ 4) | Show your statistics and reviews, publish or reply at your request | Performance of the contract |
| Questions asked to the AI agents and the business's figures | Produce analyses and recommendations (§ 5) | Performance of the contract |
| Beta access request: name, email, company, message | Contact you about HUMN Studio | Your consent |
| Technical logs and abuse protection (hashed IP address) | Service security, fraud prevention | Legitimate interest |
| Service emails (alerts, invitations, negative reviews) | Inform you of an event in your business | Performance of the contract |
HUMN Studio does not sell any data, does not run targeted advertising and does not profile your visitors.
3. Audience measurement of our customers’ websites
Websites built with HUMN Studio and websites that install the HUMN script (humn-tracker.js) are measured without cookies, without storing anything on the device and without any visitor identifier. Each measurement is independent: a visitor cannot be followed from one page or visit to another.
- Measured, in aggregate: page views (page address without its parameters, identifiers masked), form submissions and clicks on a phone number or email address (the name of the action, never its content), loading speed and page weight, device type (mobile or desktop).
- Never stored: IP address (used only in hashed form, for a few minutes, to block abusive submissions), browser or user agent, referrer, form content, screen size.
- No measurement when the browser sends an opt-out signal (Global Privacy Control or “Do Not Track”), nor for automated browsers.
- Retention: aggregated daily statistics for 25 months, then automatic deletion.
- No cross-referencing between the websites of different customers.
This measurement is strictly limited to audience measurement and technical optimization of the customer’s website, in line with the consent exemption conditions set by the French data protection authority (CNIL). Each customer can turn it off website by website.
4. Google and Meta data
When you connect a Google account (Search Console, Google Analytics, Business Profile) or a Meta account (Facebook Page, Instagram account), HUMN Studio only accesses the data needed for the features you use: search and audience statistics, reviews and replies, statistics and posts of your pages. Permissions are requested when a feature needs them.
Limited use of Google data. HUMN Studio’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Google and Meta data is used only to show your figures, produce your recommendations and carry out the actions you request.
- It is not sold, not used for advertising, not used to train artificial intelligence models, and not read by a human without your consent, except where required by law or for security purposes.
- Access tokens are stored server-side and never exposed in the browser.
Deleting your Google or Meta data. Disconnect the account in your business’s Sources, or remove HUMN Studio’s access from your Google account (Security → third-party apps) or Facebook (Settings → Business integrations). The tokens are then deleted; imported data is erased on request to hello@humn-studio.com, within 30 days.
5. Artificial intelligence agents
HUMN Studio’s agents use Anthropic’s Claude models through its API. To answer, they receive the question asked and a summary of the business’s figures (aggregated indicators, objectives, review excerpts without author names). Anthropic does not use data sent through its API to train its models. Recommendations remain proposals: nothing is published without your approval.
6. Service providers and transfers outside the European Union
- Provider
- Infomaniak Network SA
- Role
- Hosting of the website and application
- Location
- Switzerland (European Commission adequacy decision)
- Provider
- OVH SAS
- Role
- Database, backups, file storage
- Location
- France
- Provider
- Brevo (Sendinblue SAS)
- Role
- Service emails
- Location
- France
- Provider
- Stripe
- Role
- Payments and billing
- Location
- European Union, possible transfers to the United States
- Provider
- Anthropic
- Role
- AI models for the agents
- Location
- United States
- Provider
- Google, Meta
- Role
- Sources you connect (under their own terms)
- Location
- European Union and United States
| Provider | Role | Location |
|---|---|---|
| Infomaniak Network SA | Hosting of the website and application | Switzerland (European Commission adequacy decision) |
| OVH SAS | Database, backups, file storage | France |
| Brevo (Sendinblue SAS) | Service emails | France |
| Stripe | Payments and billing | European Union, possible transfers to the United States |
| Anthropic | AI models for the agents | United States |
| Google, Meta | Sources you connect (under their own terms) | European Union and United States |
Transfers outside the European Union are covered by an adequacy decision (including the EU–US Data Privacy Framework for certified companies) or by the European Commission’s standard contractual clauses.
7. Retention periods
- Account and business content: for the duration of the subscription, then deleted within 90 days of account closure.
- Invoices and accounting records: 10 years (legal obligation).
- Aggregated statistics (audience, speed, connected sources): 25 months.
- Beta sign-up: 3 years after the last contact, or until you unsubscribe.
- Backups: automatic rotation; deleted data disappears from backups at the end of their cycle.
8. Security
Encrypted connections (HTTPS), hashed passwords, access tokens kept server-side, internal access limited to those who need it, abuse rate limiting, daily backups with tested restoration.
10. Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw your consent at any time. Write to hello@humn-studio.com; we reply within one month.
If you are a visitor of one of our customers’ websites, please contact that customer first, as the controller; we will help them answer you.
You may also lodge a complaint with the CNIL (cnil.fr) or with the data protection authority of your country.
11. Changes
This policy may change as the service evolves. The update date appears at the top of the page; customers are notified by email of any significant change. See also the legal notice.