Legal

Privacy policy
& cookies.

How Corsiva handles your data on corsiva-lab.com and uses cookies. Last updated: 24 September 2026.

Data controller

CORSIVA HUB FRANCE (SASU, Rodez register 990 256 224), La Grangette, 12190 Le Nayrac, France — team based in Chambéry (Rue Marguerite Sevez, 73000 Chambéry). Contact: contact@corsiva.fr

This policy covers the corsiva-lab.com website (Corsiva Lab: the network and training). The Corsiva OS software has its own website, corsiva-os.com, and its own privacy policy.

Data we collect

  • Callback request (Contact page): name, phone number, city and chosen project (“get started” or “get equipped”), plus the page address and site language.
  • Corsiva OS demo or subscription request (Order page): name, email, phone number, company or city (optional) and chosen configuration, plus the page address and site language.
  • Appointment booking: the information you enter in the Calendly calendar (name, email, any answers), if you choose to display it.
  • Correspondence: the content of the emails and calls you send us.
  • Browsing: pages viewed and actions on the site (clicks, form sent, appointment booked), by Google Analytics only if you accept it, and by our host’s cookieless measurement (see “Cookies and trackers”).

Purposes and legal bases

  • Answering your requests (callback, appointment, demo, subscription): steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
  • Measuring the site audience and the effectiveness of our Google Ads: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
  • Keeping the site running, secure and fast: our legitimate interest (Art. 6(1)(f) GDPR).

We never sell your data.

Recipients and processors

Your data is read by the Corsiva team handling your request. Our service providers:

  • Vercel Inc. (United States) — hosting and delivery of the site; cookieless audience and performance measurement (see “Cookies and trackers”).
  • FormSubmit (Devro LABS) — form relay: the content of the form you send (see “Data we collect”) passes through this service, which forwards it to our mailbox contact@corsiva.fr. Its only purpose is to deliver your request to us. FormSubmit privacy policy.
  • Calendly LLC (United States) — appointment calendar. It only loads if you click “Show the calendar”: before that click, nothing is requested from calendly.com. Once the calendar is displayed, Calendly receives the information you enter and then shows its own cookie banner, where you accept or refuse its non-essential cookies. Calendly privacy notice.
  • Google Ireland Ltd — Google Analytics 4 and Google Ads signals, only with your consent (if you accept the “Advertising” purpose, contact details entered in our forms, hashed: see “User-provided data”); fonts and the presentation video (see “Third-party content”).
  • Stripe Payments Europe Ltd (Ireland) — payment, only if you choose to subscribe to Corsiva OS online from the Order page: the Stripe payment page opens and receives your email address to prefill the form.

Transfers outside the European Union: Vercel, Calendly and Stripe are US companies or transfer data to their US parent company, and Google may process data (Google Analytics, Google Ads, fonts, YouTube) on servers located in the United States (Google LLC). These transfers are covered by the EU–US Data Privacy Framework, for the companies certified under it, or by the European Commission’s standard contractual clauses. For FormSubmit, please refer to its privacy policy.

Retention periods

  • Contact, appointment and demo requests: 3 years after our last exchange.
  • Your cookie choice: 6 months, in your browser; you are then asked again.
  • Google Analytics cookies (_ga, _ga_*): 13 months; Google Analytics data: 14 months.
  • Google advertising cookies (_gcl_*): 90 days.
  • Vercel cookieless measurement: the visit fingerprint is deleted after 24 hours; only aggregated statistics are kept.

Cookies and trackers

No measurement or advertising cookie is set before you choose. On your first visit, a banner lets you accept all, refuse all or choose purpose by purpose; refusing does not prevent you from using the site.

Necessary (no consent required)

Remembering your cookie choice: key corsiva_consent, kept for 6 months in your browser’s local storage and never sent anywhere. The site also remembers in your browser, for the duration of the visit, that an information window has already been shown, and the Order page keeps the chosen configuration there. On Corsiva team devices only, a corsiva_interne cookie excludes their visits from the statistics.

Cookieless measurement — Vercel Web Analytics and Speed Insights

Our host Vercel counts page views (page address, referring site, country, device type, operating system and browser) and measures loading times, without cookies or any storage in your browser. Visits are recognised by a fingerprint computed by Vercel from the request, deleted after 24 hours; only aggregated statistics are kept, for our exclusive use. Legal basis: our legitimate interest in knowing the site’s traffic and performance.

Audience measurement — Google Analytics 4 (with your consent)

Google Ireland Ltd. Counting visits, page views and actions (clicks, form sent, appointment booked) to see which pages matter and improve the site. Cookies _ga and _ga_* (13 months); data kept for 14 months in Google Analytics. Google Analytics 4 does not store your IP address. Loaded only if you accept the “Audience measurement” purpose.

Advertising — Google Ads (with your consent)

Google Ireland Ltd. If you also accept the “Advertising” purpose, the Google tag may use advertising cookies (_gcl_*, 90 days) to measure the requests coming from our Google Ads and personalise ads. Without your consent, no advertising cookie is set. No Meta pixel (Facebook, Instagram) and no session recording tool (such as Microsoft Clarity) is used on this site.

User-provided data (Google enhanced conversions). What: the email address, phone number, name and postal address entered in our forms (on this site, only the city is requested as an address). When: when a form is sent, and only if you have accepted the “Advertising” purpose. How: the Google tag detects these fields and encrypts them by hashing (SHA-256) in your browser before sending; they are never sent in clear text. Why: to measure which ads bring in contact requests. Recipient: Google Ireland Ltd. Legal basis: your consent (Art. 6(1)(a) GDPR). Withdrawal: open “Manage cookies” and untick “Advertising”: nothing more is sent. For how Google uses and retains this data, see Google’s privacy policy and the Google Ads help page on enhanced conversions.

Third-party content

  • Fonts (Google Fonts): the site’s fonts are downloaded from Google’s servers (fonts.googleapis.com, fonts.gstatic.com); Google then receives your IP address and your browser’s technical information. No cookie is set.
  • Presentation video (YouTube): on the home page, the preview image is loaded from YouTube’s (Google) servers, which receive your IP address; the player (youtube-nocookie.com, privacy-enhanced mode) only loads if you click the video, and YouTube may then store information in your browser.
  • Calendly calendar: loaded only after you click “Show the calendar” (see “Recipients and processors”).
  • Social networks: the Instagram and TikTok links are plain links; nothing is loaded from these services unless you click.

Changing or withdrawing your choice

At any time via the “Manage cookies” link at the bottom of every page: the cookies of the refused tools are then deleted and the page reloads. Google’s privacy policy: policies.google.com/privacy.

Your rights

You have the right to access, rectify, erase, object to, restrict and port your data, and to withdraw your consent at any time. To exercise these rights, email contact@corsiva.fr. If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).