Personal data

Privacy policy

Last updated : 23 October 2026

What HUMN Studio does with your data, why, with whom, for how long, and how to exercise your rights.

This English version is provided for convenience. In case of discrepancy, the French version prevails.

1. Who is responsible for your data

HUMN Studio is published by SJC GROUPE, 7 rue des Néfliers, 85590 Treize-Vents, France (La Roche-sur-Yon Trade and Companies Register 879 327 930). Contact for any question about your data: hello@humn-studio.com.

Depending on the data, HUMN Studio has two roles:

  • Controller for the data of its own customers and users: account, subscription, billing, support, beta sign-up.
  • Processor for the data its customers entrust to it to run their business: audience measurement of their website, statistics and reviews of their Google and Meta pages, forms and bookings received by their HUMN websites. For this data, the customer business is the controller: its own privacy policy applies, and HUMN Studio acts only on its instructions.

2. Data processed, purposes and legal bases

Data
Account: name, email address, password (stored as an irreversible hash), organization, role
Why
Create and secure your access, manage the members of an organization
Legal basis
Performance of the contract
Data
Subscription and billing: plan, invoices, Stripe customer ID. Card numbers are entered at Stripe and never received by HUMN Studio
Why
Invoice, manage the subscription, partner seats and commissions
Legal basis
Performance of the contract, legal accounting obligations
Data
Business content: brief, objectives, actions, websites, posts, images
Why
Provide the steering service and the web Studio
Legal basis
Performance of the contract
Data
Data from the Google and Meta accounts you connect (§ 4)
Why
Show your statistics and reviews, publish or reply at your request
Legal basis
Performance of the contract
Data
Questions asked to the AI agents and the business's figures
Why
Produce analyses and recommendations (§ 5)
Legal basis
Performance of the contract
Data
Beta access request: name, email, company, message
Why
Contact you about HUMN Studio
Legal basis
Your consent
Data
Technical logs and abuse protection (hashed IP address)
Why
Service security, fraud prevention
Legal basis
Legitimate interest
Data
Service emails (alerts, invitations, negative reviews)
Why
Inform you of an event in your business
Legal basis
Performance of the contract

HUMN Studio does not sell any data, does not run targeted advertising and does not profile your visitors.

3. Audience measurement of our customers’ websites

Websites built with HUMN Studio and websites that install the HUMN script (humn-tracker.js) are measured without cookies, without storing anything on the device and without any visitor identifier. Each measurement is independent: a visitor cannot be followed from one page or visit to another.

  • Measured, in aggregate: page views (page address without its parameters, identifiers masked), form submissions and clicks on a phone number or email address (the name of the action, never its content), loading speed and page weight, device type (mobile or desktop).
  • Never stored: IP address (used only in hashed form, for a few minutes, to block abusive submissions), browser or user agent, referrer, form content, screen size.
  • No measurement when the browser sends an opt-out signal (Global Privacy Control or “Do Not Track”), nor for automated browsers.
  • Retention: aggregated daily statistics for 25 months, then automatic deletion.
  • No cross-referencing between the websites of different customers.

This measurement is strictly limited to audience measurement and technical optimization of the customer’s website, in line with the consent exemption conditions set by the French data protection authority (CNIL). Each customer can turn it off website by website.

4. Google and Meta data

When you connect a Google account (Search Console, Google Analytics, Business Profile) or a Meta account (Facebook Page, Instagram account), HUMN Studio only accesses the data needed for the features you use: search and audience statistics, reviews and replies, statistics and posts of your pages. Permissions are requested when a feature needs them.

Limited use of Google data. HUMN Studio’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • Google and Meta data is used only to show your figures, produce your recommendations and carry out the actions you request.
  • It is not sold, not used for advertising, not used to train artificial intelligence models, and not read by a human without your consent, except where required by law or for security purposes.
  • Access tokens are stored server-side and never exposed in the browser.

Deleting your Google or Meta data. Disconnect the account in your business’s Sources, or remove HUMN Studio’s access from your Google account (Security → third-party apps) or Facebook (Settings → Business integrations). The tokens are then deleted; imported data is erased on request to hello@humn-studio.com, within 30 days.

5. Artificial intelligence agents

HUMN Studio’s agents use Anthropic’s Claude models through its API. To answer, they receive the question asked and a summary of the business’s figures (aggregated indicators, objectives, review excerpts without author names). Anthropic does not use data sent through its API to train its models. Recommendations remain proposals: nothing is published without your approval.

6. Service providers and transfers outside the European Union

Provider
Infomaniak Network SA
Role
Hosting of the website and application
Location
Switzerland (European Commission adequacy decision)
Provider
OVH SAS
Role
Database, backups, file storage
Location
France
Provider
Brevo (Sendinblue SAS)
Role
Service emails
Location
France
Provider
Stripe
Role
Payments and billing
Location
European Union, possible transfers to the United States
Provider
Anthropic
Role
AI models for the agents
Location
United States
Provider
Google, Meta
Role
Sources you connect (under their own terms)
Location
European Union and United States

Transfers outside the European Union are covered by an adequacy decision (including the EU–US Data Privacy Framework for certified companies) or by the European Commission’s standard contractual clauses.

7. Retention periods

  • Account and business content: for the duration of the subscription, then deleted within 90 days of account closure.
  • Invoices and accounting records: 10 years (legal obligation).
  • Aggregated statistics (audience, speed, connected sources): 25 months.
  • Beta sign-up: 3 years after the last contact, or until you unsubscribe.
  • Backups: automatic rotation; deleted data disappears from backups at the end of their cycle.

8. Security

Encrypted connections (HTTPS), hashed passwords, access tokens kept server-side, internal access limited to those who need it, abuse rate limiting, daily backups with tested restoration.

9. Cookies

The humn-studio.com website uses no advertising or audience measurement cookies. The application only uses technical cookies needed for sign-in and language choice; they do not require consent.

10. Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw your consent at any time. Write to hello@humn-studio.com; we reply within one month.

If you are a visitor of one of our customers’ websites, please contact that customer first, as the controller; we will help them answer you.

You may also lodge a complaint with the CNIL (cnil.fr) or with the data protection authority of your country.

11. Changes

This policy may change as the service evolves. The update date appears at the top of the page; customers are notified by email of any significant change. See also the legal notice.