Privacy Policy

Cadre S.à r.l.-S, based in Luxembourg, is the controller for personal data collected through this website. You can reach us at hello@cadre.lu.

We only collect what you send us. When you use the contact form, we collect:

The site also has a chat you can open in the corner of any page. If you use it, we collect the messages you type there and the answers it gives, so we can see what people ask us, improve what the site explains, and follow up with anyone who leaves their details. It is answered by AI, and it tells you so. If you ask to be contacted, it opens the same form as anywhere else on the site, and what you type into that form is handled as a contact enquiry.

If you build a demo, we take the business name and website you type and read a few pages of that site. Opening the live call also collects your name, your work email, a phone number if you give one, and your agreement to be contacted about that demo.

We use this information to reply to you and to discuss whether we can help your business. The legal basis is your consent, and our shared interest in taking steps before a possible contract.

We do not use it for advertising, and we do not sell it.

This site does not use advertising cookies and does not follow you around the web. For analytics we use Plausible, a cookieless tool hosted in the EU that sets nothing on your device and builds no profile of you. See our cookie notice for the detail.

We use a small number of trusted providers to run the site and reply to you: our website host, our email delivery service, Cloudflare Turnstile for spam protection, and Plausible for analytics. They act on our instructions, and where they handle personal data they are bound by a data processing agreement. Where we can, we choose EU-hosted providers.

The chat is answered by a language model run by Anthropic, who process the messages you type in order to write the reply. If you leave your details in the chat, a smaller model from the same provider reads those messages once more, after the conversation, to write the summary we keep. Both take place outside the EU under the safeguards the GDPR requires for transfers. The chat has no fields for your name, your email address or your phone number: when it is time for those it opens a separate form, and that form posts them straight to us, so neither model receives them. The chat box itself is free text, so anything you type into it does reach the model, including contact details you type there instead of into the form. Anthropic states that messages sent through its API are not used to train its models, and we do not use them to train a model of our own.

A demo is written by a language model run by Anthropic from the pages of the site you gave us, and the live call runs on ElevenLabs. Both process it outside the EU under the safeguards the GDPR requires for transfers.

When you book a call, we read the free and busy times on our calendar at Google and write the appointment there. When you type an address into one of our forms, Google completes it. Both happen outside the EU under the safeguards the GDPR requires for transfers. The full list of companies we use, and where each one processes, is on our sub-processors page.

We keep contact enquiries only as long as we need them to follow up, and then for a reasonable period in case you come back to us. Alongside them we keep a short record of who enquired and what about, with your name, your email address and your business name if you gave one, until you ask us to delete it. You can ask us to delete your data at any time.

Chat conversations are kept for 30 days and then deleted automatically. If you leave your details in the chat, we keep a shorter record separately: a two-line summary of what you asked, your last question in your own words, a few topic tags, whether prices or the calendar came up, and the priority we give your enquiry as a result. We use that record to follow up with you, and we keep it until you ask us to delete it. If a conversation led to an enquiry, the enquiry itself is kept like any other.

A demo you build is kept for one hour and then deleted. Details you gave to open the live call are kept like any other enquiry.

Under the GDPR you can ask to see the data we hold about you, correct it, delete it, or object to how we use it. To do any of this, email hello@cadre.lu.

You also have the right to complain to Luxembourg's data protection authority, the CNPD (cnpd.lu).

When we run campaigns for a client, we act as their data processor under a written agreement, as Article 28 of the GDPR requires. We do not send our clients' customer data to the AI model, and personal data is stored in Europe. Our full data processing agreement and impact assessment are available to clients on request, and the sub-processors we use are published on our sub-processors page rather than sent on request.

When we change this policy, we update the date at the top of this page.