Privacy Policy
Last updated: July 2026
This policy explains what data FARI collects, why, how it is used and protected, and what your rights are. It covers the website www.fari-analytics.com and the FARI application available at app.fari-analytics.com.
1. Who is responsible for your data
The FARI service is published by FARI Analytics, whose registered office is located at 11 Cours du 30 Juillet, 33000 Bordeaux, France (see the legal notice).
FARI acts in two distinct capacities under the General Data Protection Regulation (GDPR):
- Data controller for website and user-account data (demo request form, account creation, login credentials). FARI determines how this data is used.
- Data processor for the data its clients process through the application — in particular the data of their prospects and customers obtained from their CRM and mailboxes. In this case, the client company remains the data controller; FARI acts on its instructions, under a data-processing agreement.
2. The data we process
Website and account data
- Contact details submitted via the demo request form: name, business email address, company.
- Account data: name, email address, role, associated company, display preferences.
- Technical data strictly necessary for operation and security (connection logs).
Data from your connected tools
When you connect a tool to FARI, and only with your explicit authorization, the application accesses the following data:
- CRM (HubSpot): sales opportunities, contacts (name, email, phone), companies, notes, sales emails, tasks and associated owners.
- Mailbox (Gmail or Outlook, read-only): emails related to your sales opportunities — sender, recipient, date, subject and content. FARI only searches for messages exchanged with the contacts on your deals; your other emails are neither read nor imported.
- Calendar (Google Calendar or Outlook, read-only): your past and upcoming meetings linked to your opportunities, to derive signals from them and help you prepare your meetings.
FARI only requests read-only access to your mailbox and calendar. The application can neither send, modify nor delete your emails or events.
3. Why we process this data (purposes)
- Detect sales signals and produce opportunity analyses to help your sales teams prioritize their actions.
- Help you prepare your meetings based on the history of exchanges.
- Provide, secure and improve the service.
- Respond to your requests (demo, support).
FARI never uses this data for advertising purposes and does not sell it.
4. Legal bases
- Performance of the contract for providing the service to its clients and their users.
- Consent for connecting your tools (CRM, mailbox, calendar), which you can withdraw at any time by disconnecting the tool.
- Legitimate interest for the security of the service and responding to your commercial requests.
5. Data obtained from Google APIs — Limited Use
FARI's use and transfer of information received from Google APIs (Gmail, Google Calendar) adhere to the Google API Services User Data Policy, including its Limited Use requirements. In particular:
- this data is used only to provide and improve user-facing features within FARI (sales signals, opportunity analysis, meeting preparation);
- it is never sold, nor transferred to data brokers;
- it is never used for advertising purposes;
- it is not used to train generalized artificial-intelligence models;
- no humans read this data, except: (a) with your explicit consent, (b) for security purposes (investigating abuse), (c) to comply with a legal obligation, or (d) where the data is aggregated and anonymized for internal operations.
Processing by our artificial-intelligence subprocessor (Anthropic) is carried out solely to generate the analysis you request, under a data-processing agreement, and feeds no model training.
6. Who this data is shared with (subprocessors)
FARI only shares your data with the providers strictly necessary to operate the service, each bound by a contract guaranteeing a level of protection compliant with the GDPR:
| Provider | Role | Location |
|---|---|---|
| Supabase | Hosting of the database and application (service data) | European Union (Paris) |
| Vercel | Hosting of the website and web interface | United States |
| Anthropic | Artificial-intelligence analysis (Claude model) | United States |
| Access to Gmail and Google Calendar, with your authorization | United States / EU | |
| Microsoft | Access to Outlook and the Microsoft calendar, with your authorization | United States / EU |
| HubSpot | Access to your CRM, with your authorization | United States / EU |
FARI does not sell, rent or transfer your data to any third party for commercial or advertising purposes.
7. Transfers outside the European Union
The service's data is hosted within the European Union. Some subprocessors are based in the United States: the corresponding transfers are governed by the European Commission's Standard Contractual Clauses and, where applicable, by the Data Privacy Framework, ensuring an adequate level of protection.
8. Data retention
- Account data and service data: for the entire duration of the contractual relationship, then deleted or anonymized within a reasonable period after the end of the contract.
- Access tokens for your connected tools: until you disconnect the tool or revoke access from your Google, Microsoft or HubSpot account.
- Demo requests: for the time needed to handle your request, then in accordance with our legal obligations.
9. How we protect your data
- Encryption of data in transit (HTTPS/TLS) and at rest.
- Strict segregation between each client company's data (isolation by organization).
- Access to data limited to what is strictly necessary and logged.
- Read-only access to mailboxes and calendars, with no write capability.
10. Your rights
In accordance with the GDPR and the French Data Protection Act, you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time.
To exercise these rights, write to contact@fari-analytics.com. If the data concerning you was imported by your employer (a FARI client), we will direct you to them in their capacity as data controller. You may also lodge a complaint with the French data protection authority (CNIL).
You can revoke FARI's access to your Google data at any time from your Google Account permissions page.
11. Cookies
The website and application use only the cookies and storage technologies strictly necessary for their operation (authentication, display preferences) and, where applicable, anonymized audience measurement. No advertising cookie is placed without your consent.
12. Changes
This policy may be updated to reflect changes to the service or to regulations. The date of the latest update appears at the top of the page; in the event of a significant change, we will inform you by an appropriate means.
13. Contact
For any question relating to this policy or to the processing of your data: contact@fari-analytics.com.