Note: this is a translation of the French original. In case of discrepancy, the French version prevails.
1. Data Controller
The data controller for personal data collected on this site is:
- Hans Nieuweboer, sole trader
- Operating the site under the trade name InstAItools.com
- Address: 7 chemin de la Feuille, 31210 Ponlat-Taillebourg, France
- SIRET: 44011813100067
- Personal data contact: privacy@instaitools.com
2. Data collected
Data provided at registration
- Email address (required) — to confirm registration and send programme information.
- First name (optional) — to personalise communications.
- Offer category (optional): AI tool, course, or service/expertise.
- Domain (optional): writing/text, image/design, video/audio, code/development, marketing/sales, data/analytics, productivity/office, other.
- Offer type (optional): paid or free.
- Short description (optional): a few words about the first product in mind.
Automatically generated data
- Unique referral code (6 characters) — assigned to each registered user for the referral program.
- Referrer's code (if any) — if you signed up via a referral link.
- Temporary email confirmation token — valid for 48 h, deleted upon use or expiry.
- Position number — rank assigned at registration (1 to 100).
- Registration date and time , confirmation status.
What we do not collect
No so-called 'sensitive' data (health, political opinions, etc.). No audience measurement tools or behavioural advertising at this time. No IP addresses or browsing data stored in our database.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|
| Manage registration to the Early Builder programme | Consent + pre-contractual measures (art. 6.1.a and b) |
| Confirm email via double opt-in | Legitimate interest — security and prevention of fraudulent registrations (art. 6.1.f) |
| Run the referral program | Programme performance / legitimate interest (art. 6.1.b and f) |
| Send programme-related communications | Consent (art. 6.1.a) |
| Service security | Legitimate interest (art. 6.1.f) |
4. Recipients and processors
No data is sold to third parties. The following processors are involved:
All our processors provide appropriate guarantees within the meaning of the GDPR.
5. Retention periods
- Registration data is retained for as long as the registration is active (programme in progress), then deleted or anonymised within 30 days of unsubscription.
- The email confirmation token is deleted immediately after use, or after 48 h if unused.
6. Your rights (GDPR)
In accordance with Règlement (UE) 2016/679, you have the following rights:
- Right of access — obtain a copy of your data.
- Right to rectification — correct inaccurate data.
- Right to erasure — request deletion of your data ('right to be forgotten').
- Right to restriction of processing — suspend the use of your data.
- Right to object — object to processing based on legitimate interest.
- Right to data portability — receive your data in a structured format.
- Withdrawal of consent — at any time, without affecting prior processing.
To exercise these rights: privacy@instaitools.com (response within 1 month). You can also unsubscribe via the link in any of our emails.
In case of dispute, you may lodge a complaint with the CNIL : www.cnil.fr.
7. Security
Access to data is restricted and authenticated. Communications are encrypted via HTTPS. Our processors are recognised providers with their own security measures in place.
8. Changes
This policy may be updated, in particular if new services are added or regulations change. The last-updated date shown at the top of this page is authoritative.