Privacy policy

1. Data controller

The controller is OH Ventures, a French SASU operating under the trade name Équipage IA, SIREN 103 157 251, with its registered office at 47 rue Vivienne, 75002 Paris. Contact for privacy questions and rights requests: hakim@equipage-ia.fr.

2. Data collected

The contact form collects your name, company name, business email, and message; phone and topic are optional. The AI diagnostic form collects your first name, business email, phone, and company website; then, only if you choose, your industry, the task you find most tedious, a short note, and the tools you use. The Google visibility audit form (a page for local tradespeople, outside the main menu) collects company name, city, trade, and business email; website, phone, and a short note are optional. For B2B email prospecting, see section 4. Technical data such as an IP address may be processed temporarily to secure submissions and limit abuse.

3. Purposes and legal bases

• Responding to messages and audit requests: steps taken at your request before entering a contract.
• Producing and sending an AI diagnostic, up to four follow-up emails over ten days, and recording the contact in our customer relationship tool: consent, given by sending the form after reading the notice below the button, which may be withdrawn at any time.
• B2B email prospecting: the legitimate interest of OH Ventures in presenting its services to businesses (see section 4).
• Securing the website and preventing abuse: the legitimate interests of OH Ventures.
• Keeping evidence and handling rights requests: legal obligations and legitimate interests.

4. B2B prospecting

OH Ventures contacts businesses by email to present its services. These messages are sent to professionals, about their business activity.

• Data processed. Name, job title, company and its public information (industry, city, website), business email address, and the history of our exchanges.
• Sources. Public information only: the French business register (Sirene), the company website, and professional databases (Hunter, Apollo, Lemlist) that list addresses published online. On request, we tell you the exact source of your address.
• Legal basis. The legitimate interest of OH Ventures in contacting professionals about an offer related to their business.
• Opting out. Each email explains how to stop receiving them: simply reply "stop". You can also write to hakim@equipage-ia.fr. Your objection is applied without delay and no follow-up is sent.
• Retention. Three years after the last contact, then deletion. After an objection, the address is kept on a suppression list so that we do not write to you again.
• Tools. Emails are sent with Lemlist. Exchanges are tracked in Notion.

5. Recipients and processors

Data is available to OH Ventures and, only as needed, to its processors. It is not sold or disclosed to third parties for their own commercial marketing.

• Vercel Inc. hosts the website.
• Plus Five Five, Inc. (Resend) delivers emails sent from the contact, audit, and AI diagnostic forms.
• AI diagnostic. A France-hosted analysis server; Anthropic, whose AI model drafts the report from public website content and your answers; GoHighLevel, for customer relationship management and diagnostic and follow-up email delivery.
• Prospecting. Lemlist for sending emails, Notion for tracking exchanges, Hunter and Apollo for finding published business email addresses.
• Booking a call. Appointments are booked through Calendly (Calendly LLC, United States): the details you enter there (name, email address, chosen time slot) are processed by Calendly under its privacy policy.
• Audience measurement. If you consent, Google Ireland Limited receives navigation data through Google Analytics 4 and Google Tag Manager (see section 7).

6. Retention

Contact and prospect data is retained for three years after collection or the last contact, then deleted, unless a legal obligation or the defense of a legal claim requires longer retention. Diagnostic download links expire after 60 days. Information needed to honor an objection may be kept on a suppression list for at least three years. Consent choices are retained for six months.

7. Audience measurement and cookies

No audience measurement or advertising cookie is used without consent. The first-party eq_consent cookie stores the choice itself and is strictly necessary. Google Tag Manager loads in denied consent mode until you opt in. You can change your choice at any time by using the cookie settings control in the footer.

8. Your rights

Under the EU General Data Protection Regulation and French data-protection law, you may request access, correction, deletion, restriction, or objection and may withdraw consent. France's independent data-protection authority is the CNIL. You may complain to the CNIL at cnil.fr. Send requests to hakim@equipage-ia.fr.

9. Security and international transfers

OH Ventures uses HTTPS, restricted access, secrets stored outside source code, and submission limits. Vercel, Resend, Anthropic, GoHighLevel, Notion, Hunter, Apollo, and Google may process data in the United States. Their data-processing terms use the legal transfer mechanisms applicable under EU and French law, including the European Commission's standard contractual clauses where relevant.

10. Capitaine and connections to your tools

Capitaine is the platform of OH Ventures, operating under the trade name Équipage IA, SIREN 103 157 251, 47 rue Vivienne, 75002 Paris. Each customer receives a dedicated instance hosted in the European Union in Germany by Hostinger. The customer retains ownership of its data and may request an export.

Connections to Google Workspace, Microsoft 365, HubSpot, or another enabled connector require explicit authorization. Access is read-only except for actions the customer approves. Access tokens are encrypted in the dedicated Capitaine instance. The technical relay connect.equipage-ia.fr transmits authorization without retaining the token.

Équipage IA's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. Connections can be revoked from Capitaine or from the relevant provider account. Questions may be sent to hakim@equipage-ia.fr.

11. Governing law

This privacy policy and the processing described in it are governed by French law, together with directly applicable European Union data-protection law.