Privacy Policy

Privacy Policy

Last updated: July 2026

1. Who are we?

The minddex.ai website and the Minddex platform are published by KORTAIX SAS, a French simplified joint-stock company with a share capital of €10,000, registered with the Paris Trade and Companies Register (RCS) under number 989 787 767, with its registered office at 56 Avenue de Suffren, 75015 Paris, France.

Minddex is a platform for measuring and activating brand visibility in AI-generated responses (ChatGPT, Gemini, Perplexity, Claude, Google AI Overviews).

Data controller: KORTAIX SAS Contact for any question relating to personal data:  privacy@minddex.ai

2. What data do we collect, and why?

2.1 Contact forms and demo requests

When you fill in a form on our website (contact, demo request, resource download), we collect the data you provide: first name, last name, business email address, company, job title, phone number where applicable, and the content of your message.

Purpose: responding to your request and managing the commercial follow-up of the relationship. Legal basis: pre-contractual measures taken at your request (Article 6.1.b GDPR) and legitimate interest (Article 6.1.f GDPR).

2.2 Customer accounts and platform usage

When your organization subscribes to Minddex, we collect the data required to create and manage your user account: identity, business email address, company, login credentials, as well as platform usage data (connection logs, actions performed).

Purpose: providing the service, technical support, billing, platform security, product improvement. Legal basis: performance of the contract (Article 6.1.b GDPR).

2.3 Newsletter and email audience measurement

Our newsletter is sent to executives and marketing and digital professionals, on the basis of our legitimate interest in keeping industry professionals informed (Article 6.1.f GDPR). The business contact details we use come either from a voluntary sign-up or from publicly available professional sources. You can unsubscribe at any time via the link included in every email.

Our emails contain a measurement pixel that tells us whether an email has been opened. The sole purposes of this measurement are improving our content, adjusting the frequency of our mailings, and removing inactive recipients. In accordance with the CNIL recommendation of 14 April 2026, you may object to this measurement at any time, without ceasing to receive our communications, via the objection link included in each of our emails or by writing to us at [ADDRESS TO CONFIRM]. No individual open-rate measurement is carried out for recipients who have objected to it, nor for contacts who did not consent to it at the time their data was collected.

Contacts who show no interaction with our emails over an extended period are removed from our mailing lists.

2.4 B2B commercial prospecting

We may send commercial communications to professionals whose business contact details come from public sources or professional databases, where our services are relevant to their professional activity.

Purpose: offering our services to professionals likely to be interested. Legal basis: legitimate interest (Article 6.1.f GDPR), in accordance with the rules applicable to B2B prospecting in France.

Every prospecting message includes a simple way to object to any further solicitation. You may also exercise your right to object at any time by writing to us.

2.5 Website audience measurement

We use audience measurement tools to understand how our website is used (pages viewed, traffic sources, devices used).

Purpose: traffic statistics and website improvement. Legal basis: your consent (Article 6.1.a GDPR), collected via our cookie banner, except for tools exempt from consent within the meaning of the CNIL guidelines.

3. Who has access to your data?

Your data is accessible only to the authorized teams of KORTAIX SAS, as well as to our processors acting strictly within the scope of the purposes described above:

  • Brevo (France): sending and managing our emails and newsletters.
  • Twenty: customer relationship management (CRM).
  • Hosting of the website and platform: [TO COMPLETE: host of the WordPress site and the platform, e.g. Cloudflare, OVH, AWS…].
  • Audience measurement and advertising tools: [TO COMPLETE if Google Analytics / Google Ads are active on the site].

We do not sell or rent your personal data to third parties.

4. Is your data transferred outside the European Union?

Our main service providers are established in the European Union. Where certain tools involve a transfer of data to third countries (in particular the United States), these transfers are governed by appropriate safeguards: an adequacy decision (EU-U.S. Data Privacy Framework) or the standard contractual clauses of the European Commission.

5. How long do we keep your data?

  • Prospects and commercial contacts: 3 years from your last contact with us.
  • Newsletter subscribers: until you unsubscribe; contacts who remain inactive for an extended period are removed from our lists.
  • Customers: for the duration of the contractual relationship, followed by limited archiving for the applicable statutory limitation periods (5 years for contractual matters, 10 years for accounting documents).
  • Connection logs and security data: 12 months maximum.
  • Cookies and trackers: 13 months maximum; data collected through these trackers is kept for a maximum of 25 months.

6. What are your rights?

In accordance with the GDPR and the French Data Protection Act (Loi Informatique et Libertés), you have the following rights over your personal data:

  • right of access, rectification and erasure;
  • right to restriction of processing;
  • right to object, in particular to commercial prospecting and to the individual open-rate measurement of our emails;
  • right to data portability;
  • right to define directives regarding the fate of your data after your death.

To exercise these rights, write to us at [ADDRESS TO CONFIRM] or by post at: KORTAIX SAS, 56 Avenue de Suffren, 75015 Paris, France. We may ask you for proof of identity in the event of reasonable doubt as to your identity.

If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at www.cnil.fr.

7. Cookies

On your first visit to our website, a banner informs you of the presence of cookies and allows you to accept, refuse or configure their use, with the exception of cookies strictly necessary for the operation of the site.

Categories of cookies used:

  • Strictly necessary cookies: operation of the website and platform (session, authentication, security). These do not require consent.
  • Audience measurement cookies: traffic statistics, set with your consent unless exempt under CNIL guidelines.
  • Advertising cookies: [KEEP OR REMOVE depending on actual use of Google Ads / remarketing] set only with your consent.

You can change your choices at any time via the “Manage my cookies” link in the website footer.

8. Security

KORTAIX SAS implements appropriate technical and organizational measures to protect your data against loss, unauthorized access, disclosure or alteration: encrypted communications (HTTPS), access controls, logging, and team awareness training.

9. Changes to this policy

We may update this privacy policy to reflect changes in our services or in applicable regulations. The date of the last update appears at the top of this page.