Legal information

Privacy policy

Last updated: October 31, 2026

This policy explains which personal data the terminus2pi.com website collects, why, how long we keep it, who it is entrusted to and how to exercise your rights. It follows the General Data Protection Regulation (GDPR), the French Data Protection Act and, for people in Switzerland, the Swiss Federal Act on Data Protection (FADP).

Data controller

The data controller is [to be completed], [to be completed], whose registered office is at [to be completed]. For any question about your data, write to [email protected].

Data collected and uses

We only collect the data each use needs. It is neither sold nor passed on.

UseDataLegal basisRetention
Contact formName, e-mail address, phone, organization, message; the name, address, phone and organization are also stored in our Brevo address bookPre-contractual steps and legitimate interest in answering you3 years after our last exchange
Self-assessmentName, work e-mail address, phone, organization, role (optional), website, activity in a few sentences (optional), answers and resultConsent3 years after our last exchange
Preparing our first exchange, after a self-assessmentAbout your organization only, never about you: its name, website, sector, size, the activity described, its profile and priorities. We read its website and the first public results of a web search about it, and draw from them a summary of its activity and ways to improve, kept for our teamLegitimate interest in preparing the exchange you asked for; you can object by writing to us3 years after our last exchange
Waitlist of the Liquid platformFirst name, last name, e-mail address, phone, company (optional), languageConsent, which you can withdraw at any time through the unsubscribe link in every e-mailUntil the platform opens, then 3 years after our last exchange
Newsletter (articles and workshops)E-mail address, nameConsent, which you can withdraw at any timeUntil you unsubscribe
Client spaceE-mail address, name, main need; optional: company, role, how you heard about us; account and team, credit movementsPerformance of the termsWhile the account is open, then 3 years after our last exchange
Requests and orders from the client space (Liquid Cloud, Liquid Edge, Liquid Enterprise)Instance name, chosen host and size; box configuration, delivery phone and address; headcount, number of users and project descriptionPerformance of the terms; pre-contractual steps for a quoteWhile the account is open, then 3 years after our last exchange
Customer serviceQuestions asked, topic, messages exchanged with our teamPerformance of the termsWhile the account is open, then 3 years after our last exchange
Payments (top-ups, orders, payment requests)Billing profile (company or individual, name, address, country, VAT number checked with the EU VIES register), amount, item, date, who paid, type and last 4 digits of the means of payment, automatic top-up and support plan settings. Card numbers and IBANs are entered at Stripe and never go through our serversPerformance of the terms; accounting obligations10 years for accounting records, then deletion
Prospecting professionalsName, work e-mail address, company, role, sector, and where we met: a trade show, a previous exchange, notably with the company Gencovery, whose professional contacts we have taken overLegitimate interest in presenting our services to professionals, on a subject related to their work; you can object at any time through the unsubscribe link in every e-mail3 years after our last exchange
Website securityTechnical connection data: IP address, requested page, date and timeLegitimate interest in keeping the website secureLog retention period of the host and of Cloudflare

Profile computed by the self-assessment

The self-assessment automatically computes a maturity profile and priorities from your answers. It only serves to guide you: it has no legal effect and leads to no decision about you.

Who has access to your data

Only authorized Terminus 2π staff have access. The following providers process it on our behalf, following our instructions:

  • Brevo (Sendinblue SAS) (France): Sending e-mails (sign-in codes, diagnostic, notifications), managing contacts, the newsletter and prospecting.
  • Stripe Payments Europe, Ltd. (Ireland): Online payments (card, SEPA debit), saving the means of payment, receipts.
  • Clever Cloud SAS (France (Paris area)): Hosting of the website and its database.
  • Cloudflare, Inc. (United States): Delivering the pages and protecting against attacks.
  • Anthropic, PBC (United States): Reading your organization’s website and public search results, to prepare our first exchange after a self-assessment (information about the organization only).

Transfers outside the European Union

The website and its database are hosted in France. Cloudflare, Inc., a company established in the United States, processes technical connection data to deliver and protect the pages; this transfer is covered by the safeguards the GDPR provides (EU–US Data Privacy Framework and standard contractual clauses). The same applies to Stripe, whose parent company is established in the United States, and to Anthropic, PBC, established in the United States, to which we send only information about your organization (never your name, e-mail address or phone). Switzerland recognizes France as offering an adequate level of protection.

Cookies

The website sets no audience measurement, advertising or social media cookies. It only sets strictly necessary cookies, which do not require your consent:

CookiePurposeLifetime
t2p_client_codePending client space sign-in code10 minutes
t2p_clientClient space session30 days
t2p_client_onTells the website a client space session is open, to show “My space”30 days
t2p_onboarding_laterWelcome dialog put off until laterUntil the browser closes
t2p_admin_codePending administration sign-in code10 minutes
t2p_admin_onTells the website an administration session is open, to show “My space”12 hours
t2p_adminAdministration session (Terminus 2π staff)12 hours

Your rights

At any time you can access your data, have it corrected or erased, restrict its processing, object to it, receive it in a reusable format, withdraw your consent and, in France, set instructions on what happens to it after your death. For the newsletter, every e-mail has an unsubscribe link. To exercise your rights, write to [email protected]. We answer within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL (cnil.fr) or, if you are in Switzerland, with the Federal Data Protection and Information Commissioner (edoeb.admin.ch).

Security

Exchanges with the website are encrypted (HTTPS). Signing in to the client space and the administration uses no password, but a one-time code sent by e-mail and valid for 10 minutes. The forms are protected from robots by a short calculation your browser makes before sending, with no third party and no cookie. Access to the data is limited to authorized people.

Who the website is for

The website and the client space are meant for professionals. They are not intended for people under 16.

Changes

We update this policy when the website changes, for instance when adding an audience measurement tool or a payment method. The date of the last update is at the top of the page.

Legal notice →