Privacy

This website is not tracking you.

By default when using the platform, every transaction is anonymous. You may or may not reveal information about the transactions you are part of, and the platform will not display it to other users. To selectively reveal information about yourself you can choose the level of privacy you want in the account settings.

We collect anonymous telemetry on the web platform's most essential features, such as:

• The total number of users on Organigram.ai;
• The number of organizations, workspaces and organigram created;
• The number of transactions created and the IPFS storage used for each organization.
• The number of views for each page of the documentation;

This telemetry is only used for the correct operation of the service and not shared with any third party.

The User can decide to save its wallet and/or email address. In this case, information from the User will be saved and linked to its activity on the platform. Our privacy policy below explains in detail how they will be processed by Organigram.ai.

Privacy Policy

1. Preamble

The company Organigram SAS, editor of the present document, processes personal data. The personal data collected varies depending on how the services are used. The personal data collected or held is either directly communicated by the individual him herself or comes from third parties, or is collected from activity on the website and use of the services. The purpose of this privacy policy is to inform users of the: • How their personal data is collected and processed. Personal data is any data that can be used to identify a user. This includes the user's first and last name, age, postal address, e-mail address, location and IP address; • What rights do users have regarding this data?

• Who is responsible for processing the personal data collected and processed? • To whom these data are transmitted; • The site's cookie policy. This privacy policy supplements the Legal Notice and General Conditions of Use that users can consult on the Organigram.ai website.

2. General principles for data collection and processing

In accordance with the provisions of Article 5 of European Regulation 2016/679, which came into force on May 25, 2018, the collection and processing of site users' data complies with the following principles:

• Legality, fairness and transparency: data may only be collected and processed with the consent of the user who owns the data. Whenever personal data is collected, the user will be informed that his or her data is being collected, and for what purpose the data is being collected;
• Limited purposes: data are collected and processed for one or more specific purposes;
• Minimization of data collection and processing: only the data necessary for the proper execution of the objectives pursued by the site are collected;
• Data storage limited in time: data is stored for a limited period, of which the user is informed. When this information cannot be provided, the user is informed of the criteria used to determine the retention period;
• Integrity and confidentiality of data collected and processed: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.

In order to be lawful, and in accordance with the requirements of Article 6 of European Regulation 2016/679, the collection and processing of personal data may only take place if they comply with at least one of the conditions listed below:

• The user has expressly consented to the processing;
• The processing is necessary for the proper performance of a contract;
• The processing is required by law;
• The processing and collection of personal data are necessary for the purposes of the legitimate and private interests pursued by the data controller or by a third party.

3: Personal data collected and processed when browsing the site

3.1: Data covered

Organigram.ai may collect personal data directly from the user. In accordance with the principle of minimization, Organigram.ai only collects data that is necessary for the purposes for which it is processed. The various categories of data collected when the user subscribes to and uses the services or applications are as follows:

• Identification data (in particular surname, first name, customer number, customer technical identifiers);
• Contact data (including postal or e-mail address);
• Connection data (including your computer's IP address, connection and usage logs);
• Financial data (payment methods and history);
• Commercial data (list of products and services available to you);
• Location data;
• Function data;
• Content data. The data controller will keep all data collected on the site's computer systems under reasonable security conditions for a period of three (3) years, with the exception of data required to establish proof of a right or contract, which may be legally archived for five years.

3.2. Data hosting

The data collected and processed by the site is hosted in the European Union. The service providers listed in article 4.5 may process certain data outside the European Union, under appropriate safeguards as required by the GDPR.

4. Processing & purposes

The way in which data is collected and details of how it is used are set out below:

4.1. Sales and marketing prospecting

The following information is collected and processed: contact details, such as surname, first name, home address, country of residence, telephone number, e-mail address. The purpose of using this information, which constitutes personal data, is:

• To send communications about products and services, for commercial prospecting purposes. These communications may take the form of e-mail, post, SMS, telephone calls or targeted online advertising. This data is kept for canvassing purposes for a maximum of 3 years.
• Where data has been collected in connection with the provision of a service or with requests for information, information on similar services or services targeted on the basis of previous requests may be sent, unless the person concerned requests that such commercial communications cease to be sent or chooses not to receive them. This data is kept for prospecting purposes for up to 3 years after collection.
• Each time an electronic communication for commercial prospecting purposes is sent, the recipient has the option of choosing not to receive it in the future by means of an unsubscribe link. In addition, it is possible, at any time, to send an e-mail to the following address:hello@organigram.ai in order to request that such commercial communications no longer be sent. The use of data and information as described above is authorized by the regulations applicable to the protection of personal data. In most cases, this processing of personal data for commercial prospecting purposes is based on the legitimate interests of Organigram.ai. In addition, where the data subject has given his or her consent directly to the Company's partners (such as insurance companies, comparison sites, social networking platforms, marketing agencies and affiliation platforms, search engines, online real estate advertising sites), the Company may receive his or her personal data. The Company may then use this information to promote its services under the conditions described above.

4.2. Online contact questionnaire

The following information is collected and processed: IP address, zip code, telephone number and, where applicable, the information provided in the online questionnaire. This information is used solely to establish contact with the person who filled in the online questionnaire and to respond as precisely as possible to his/her request. The data collected when the completed online questionnaire is sent is kept for a maximum of 3 years. The use of this information as described above is authorized by the regulations applicable to the protection of personal data. In this case, the processing of personal data is based on the consent of the person concerned.

4.3. Cookies

Organigram.ai uses cookie technology to improve site navigation and user experience. During consultation of the site, these cookies may be saved on the browsers of the media used, whatever the terminal (computer, tablet, Smartphone). In particular, they are used to identify visitors and analyze the use of site elements. At any time, visitors can decide to accept or refuse the use of cookies and modify their preferences. The cookie has a validity period which varies according to the type of cookie and enables the visitor to be recognized the next time he or she uses the website. In any case, this period does not exceed thirteen (13) months. For your information, the following addresses provide instructions on how to configure your browser to prevent cookies from being stored on your computer:

• Chrome: https://support.google.com/accounts/answer/61416?hl=fr Firefox: https://support.mozilla.org/fr/kb/enable-and-disable-cookies-website-preferences
• Safari: http://www.apple.com/legal/privacy/fr-ww/
• Internet Explorer: https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies
• Opera: http://www.opera.com/help/tutorials/security/cookies/ Visitors may decide to accept or refuse cookies when browsing the site. To this end, Organigram.ai displays a banner on its site inviting visitors to accept cookies. As long as the visitor has not given his/her consent to the collection of cookies, no cookie may be deposited on his/her terminal, with the exception of cookies exempted from the collection of consent insofar as they are strictly necessary for the provision of a service expressly requested by the user.

4.4. Sales and services

The following information is collected and processed: surname, first name, address, telephone numbers), e-mail address, location, job title. In addition, for the execution of pre-contractual measures or of the contract with the Company, when the entity implements processing for the following purposes: prospecting, production, management, follow-up of customer requests and files, drafting of deeds on behalf of its customers, prevention of money laundering and financing of terrorism and fight against corruption, invoicing and accounting. All the information required for these purposes is collected and processed. This information is used to fulfill the purposes related to the services requested. Such processing is authorized by the regulations applicable to the protection of personal data, and in all cases rests on the legal basis of the contract binding the data subjects and the Company or that of legitimate interest. Unless otherwise specified, the above information is required to fulfill our contractual obligations.

When an organization verifies its registration number, the address of its registered office is read from the national company register (in France, the RNE kept by the INPI) and used as its default billing address. An administrator of the organization can change it at any time.

The contact form of the pilot page collects a name, an email address, an organization, a request and, for a callback, a phone number. They are sent to our team by email to answer the request, on the basis of pre-contractual measures, and kept for three years after the last contact.

4.5. Service providers

The following service providers receive the data needed for their service, on behalf of the Company:

• Stripe: payments, invoicing and VAT calculation, including the billing address, legal name and VAT number;
• Didit: identity verification of the members concerned;
• Brevo: sending of emails;
• Pinata: storage of files on the IPFS network;
• Google: sign-in and workspace access, when the user chooses it.

These providers process this data only for the performance of the Services. Data recorded on a blockchain or on a public network cannot be deleted.

5. Data controller

5.1. The data controller

The person responsible for processing personal data is Mr Louis MARGOT-DUCLOT, Chairman of Organigram SAS. Telephone: +33 9 52 71 72 74 Email: hello@organigram.ai

5.2. Obligations of the data controller

The data controller is responsible for determining the purposes and means of processing personal data. The data controller undertakes to protect the personal data collected, not to pass it on to third parties other than the service providers listed in article 4.5 without the user's knowledge, and to respect the purposes for which the data was collected. An SSL certificate ("Secure Socket Layer" Certificate) secures the data exchanged between the user and the site. In addition, the data controller undertakes to notify the user of any rectification or deletion of data, unless this would entail disproportionate formalities, costs or steps. In the event that the integrity, confidentiality or security of the user's personal data is compromised, the data controller undertakes to inform the user by any means necessary.

6. User rights

6.1. Presentation

Any person whose personal data has been collected and processed in connection with the implementation of this privacy policy has the following rights:

• the right to access personal data;
• the right to correct any errors in the;
• the right to have personal data erased, to restrict processing or to object to processing;
• the right to withdraw consent;
• the right to object to receiving commercial prospecting documents in the future;
• the right to data portability;
• the right to limit and object to data processing;
• the right to define general and specific directives defining the way in which he/she intends the above-mentioned rights to be exercised after his/her death.

6.2. Implementation

Any person may lodge a complaint with the CNIL. All questions raised in this Policy and requests to exercise the rights of the person concerned are handled by the Data Protection Officer, who can be contacted as follows: by e-mail at the following address hello@organigram.ai. By post to the following address

Organigram SAS 5, parvis Alan Turing, 75013 Paris

Any request to exercise rights of access, rectification, deletion or limitation of processing must be accompanied by a copy of the applicant's identity document. The data controller is obliged to respond to the user within a maximum of 30 (thirty) days.

In the event that the data controller decides not to respond to the user's request, and the user wishes to contest this decision, or if the user believes that one of the rights listed above has been infringed, the user has the right to contact the CNIL (Commission Nationale de l'Informatique et des Libertés, https://www.cnil. fr) at the following address:

• CNIL - 3 place de Fontenoy - TSA 80715 - 75334 Paris cedex 07

7. Conditions for modifying the privacy policy

This privacy policy may be consulted at any time at the following address: /en/docs/reference/privacy. The site editor reserves the right to modify it in order to ensure compliance with current legislation. In the event of substantial modification, an e-mail will be sent to the user who has entered his or her personal data.

8. Updating the privacy policy

This privacy policy was last updated on 21/06/2023. We reserve the right to modify it at any time in order to provide up-to-date information on how we collect and process data.