Privacy Policy – InPerson

Last Updated: 6 May 2025

Table of Contents
  1. Who We Are & Scope
  2. What We Collect
  3. Where We Get Data
  4. Purposes & Legal Bases
  5. Marketplace Permitted Uses
  6. Cookies & Tracking
  7. Sharing & Disclosures
  8. International Transfers
  9. Security Measures
  10. Data Retention
  11. Children's Data
  12. Your Rights
  13. US State Laws
  14. Opt-Out & Takedown
  15. Automated Decisions
  16. Controller vs Processor
  17. Subprocessors
  18. Your Choices
  19. IP & Infringement
  20. Breach Notification
  21. Changes to This Policy
  22. Definitions
  23. Annex A

1. Who We Are & Scope

InPerson SAS (“InPerson”, “we”, “us”, “our”) is a Paris-based company (34 rue Dauphine, 75006 Paris, France). We collect, process, and provide structured datasets via web platforms, APIs, and the Snowflake Marketplace. This Policy covers both our role as a controller of sourced and licensed data and as a processor of customer-provided data under our Data Processing Addendum (DPA).

2. What We Collect

3. Where We Get Data

All records include provenance metadata (source URL/ID, timestamp, license tag) for traceability.

4. Purposes & Legal Bases

  1. Service delivery & improvement (contract; legitimate interests).
  2. Data governance, quality, and normalization (legitimate interests; legal obligation).
  3. Security, fraud prevention, and abuse detection (legitimate interests; legal obligation).
  4. Support and communications (contract; consent).
  5. Analytics & research (legitimate interests; consent for non-essential use).
  6. Feature engineering & modeling (no deceptive or impersonation use; legitimate interests; consent for voice).
  7. Legal compliance (legal obligation).

You may object to processing based on legitimate interests at any time (Section 12).

5. Marketplace Permitted Uses & Restrictions

6. Cookies & Tracking

We use essential cookies for security and navigation. With consent, we use analytics cookies to measure site usage. Manage cookie preferences via our banner or browser settings. We do not honor non-standardized "Do Not Track" signals.

7. Sharing & Disclosures

We do not "sell" personal data in the traditional sense. See Section 13 for opt-out rights.

8. International Transfers

Data transferred outside the EEA/UK is protected by EU Standard Contractual Clauses (SCCs), UK IDTA, or other lawful safeguards. Additional measures include encryption and access controls.

9. Security Measures

We implement industry-standard controls: encryption in transit and at rest, role-based access, least-privilege, regular audits, vulnerability scanning, incident response, and personnel training.

10. Data Retention

We retain minimal audit logs for opt-out enforcement and legal obligations.

11. Children's Data

Not directed to children under 16 in the EEA/UK or under 13 in the US. We do not knowingly collect data about minors; we will promptly delete if discovered.

12. Your Rights

Depending on jurisdiction, you may have rights to access, correct, delete, restrict, or port your data, and to object to processing. To exercise rights, email contact@in-person.ai. We verify identity and respond within legal timelines. EU complaints: CNIL (www.cnil.fr).

13. US State Privacy Rights

Residents of states with privacy laws (CPRA, VCDPA, CPA, CTDPA, UCPA) may have rights to know, correct, delete, opt out of "sale" or "sharing", and appeal. To opt out, email contact@in-person.ai with "Do Not Sell or Share" in the subject.

14. Public-Source Opt-Out & Takedown

To remove or suppress your public-source data, email contact@in-person.ai with relevant URLs or identifiers. We honor removal requests in future updates and suppress data for your privacy.

15. Automated Decisions & Profiling

We do not make decisions with legal or significant effects solely by automated means. We may profile public data for entity extraction and analytics; you may object (Section 12).

16. Controller vs Processor & DPA

Controller: For data we source and license and then provide. Processor: For customer-provided data. Our Data Processing Addendum, including SCCs, is available on request via contact@in-person.ai.

17. Subprocessors

We engage subprocessors for hosting, analytics, QA, and support under written agreements with confidentiality and data protection obligations. A current list is available on request.

18. Your Choices

19. IP & Infringement

If you believe our datasets include infringing or unlawful content, contact contact@in-person.ai with details. We review and remove content as appropriate.

20. Breach Notification

We maintain an incident response plan. In the event of a data breach affecting personal data, we will notify impacted individuals and authorities within 72 hours where required by law.

21. Changes to This Policy

We may update this Policy for legal, technical, or business reasons. We will update the "Last Updated" date and publish changes on our website. Material changes may be communicated by email.

22. Definitions

23. Annex A – Lawful Basis Examples


--

InPerson
34 rue Dauphine, 75006 Paris (France)
contact@in-person.ai