Privacy Policy

Protecting your personal information

Last updated: January 18, 2025 · Effective from January 1, 2025

This Privacy Policy describes how Navinspire (“we”, “our”, “Navinspire”), owner of the Lynara platform, collects, uses, shares and protects your information when you use our SaaS services, applications, software and websites related to lynara.ai and navinspire.ai (collectively, the “Services”).

By using our Services, you acknowledge that you have read, understood and accepted this Privacy Policy. If you do not consent, you must stop using our Services immediately.

Our Services are not intended for people under 18. If you are under 18, please do not use Lynara.

1. 1. Information we collect

We collect different types of information, voluntarily or automatically, in order to provide and improve our services.

1.1 Information provided directly by the user

This includes in particular:

Account information

  • last name, first name
  • email address
  • password (hashed and never readable)
  • company information (if applicable)

User content

Any information provided when using the Services, such as:

  • texts, files, images, PDF, Excel, uploaded documents
  • messages sent in our interfaces (chatbot, CRM, HR, Finance…)
  • data entered in forms
  • AI-generated outputs that may contain personal data

Communications

  • emails exchanged with our support
  • feedback, reviews, assistance requests
  • conversations with our AI agents
  • responses to surveys or forms

1.2 Information collected automatically

Technical data

  • device type
  • operating system
  • browser
  • language
  • time zone
  • IP addresses
  • device identifiers
  • technical logs and diagnostics

Usage data

  • pages viewed
  • session duration
  • clicks
  • actions performed in the interface
  • errors and application logs
  • processing volumes (AI tokens, OCR, import, export…)

Cookies and similar technologies

We use:

  • functional cookies
  • analytics cookies
  • local device/app storage
  • secure session tracking

No advertising cookies are used.

2. 2. How we use your information

We use your data to:

Provide the Services

  • account creation
  • authentication
  • execution of modules (AI, CRM, Finance, HR, OCR…)
  • personalization of the user experience

Improve the Services

  • performance optimization
  • analysis of how the Services operate
  • development of new features

Security

  • detection of abnormal behavior
  • fraud prevention
  • prevention of abuse and attacks
  • audit and logging

Legal compliance

  • accounting obligations
  • GDPR / AI Act regulations
  • requests from authorities when legally required

Password

The password is used only for account creation and authentication. It is hashed, not readable, and never shared.

3. 3. Sharing your information

Navinspire never sells your personal data.

We never share your information for targeted advertising purposes.

We may share certain information only in the following cases:

3.1 Service providers

Strictly necessary providers:

  • hosting
  • secure storage
  • security
  • AI processing (local models or providers selected by the Client)
  • technical infrastructure (emails, logs, monitoring)

All are subject to strict confidentiality obligations.

3.2 Sharing features

If you use collaborative features, your data may be visible to:

  • members of your company,
  • internal administrator accounts.

3.3 Legal requirements

We may disclose data only if required by law or to protect:

  • the security of users,
  • our legal rights,
  • the integrity of the platform.

3.4 Navinspire group entities

We may share data with our subsidiaries for:

  • performance of the service
  • support
  • billing
  • technical operations

4. 4. Data security

Navinspire implements advanced security measures:

Technical

  • encryption in transit (TLS 1.3)
  • encryption at rest
  • secure authentication
  • RLS / isolation by company
  • network filtering
  • application firewalls
  • anti-intrusion systems

Organizational

  • strictly limited internal access
  • regular audits
  • internal GDPR policy
  • AI Act compliance
  • full logging and audit

AI

Customer data is never used to train public models. The sovereign models used in Lynara do not store any user data.

No system can guarantee absolute security, but we apply industry best practices.

5. 5. Retention period

We retain data:

  • for the duration necessary to perform the Services
  • for as long as required by law
  • until a deletion request by the Client

When data is no longer needed: → it is securely deleted or anonymized.

6. 6. Children’s data

Our Services are not intended for persons under 18 years of age. We do not voluntarily collect their data. If such collection is identified, the data is deleted immediately.

7. 7. International transfers

We may transfer data to countries outside the EU. In that case, we apply:

  • Standard Contractual Clauses (SCC)
  • mechanisms approved by the EU, the United Kingdom or Switzerland
  • enhanced security controls

Our processing remains compliant with the GDPR and the AI Act.

8. 8. Your rights (GDPR, AI Act)

You have the following rights:

  • Access your data : Request a complete copy of personal data.
  • Correct your information : Rectify any inaccurate or incomplete data.
  • Delete your data (“right to be forgotten”) : Full or partial deletion upon request.
  • Restrict or object to processing : Except for legal obligations.
  • Portability : Receive your data in a structured format.
  • Withdraw your consent : At any time.
  • Lodge a complaint : With the data protection authority.

To exercise your rights: contact@navinspire.com

9. Contact

For any question regarding this Privacy Policy: contact@navinspire.com