Privacy Policy

Effective as of December 1st, 2025

Graybox SAS ("us", "we", or "our") operates the www.graybx.com website (the "Service"). This privacy policy will explain how our organization uses the personal data we collect from you when you use our website (“You”).

In connection with the information collected via our website, we operate as the Controller of your personal data. For information gathered through Graybx's MLOps platform, we act as the Processor on behalf of our customers, processing their users' personal data in accordance with their instructions and the terms agreed upon.

How We Collect Your Information

While using our site, you may choose to voluntarily provide us with personally identifiable information when you register to our Services (“Account Data”), when you contact or request information from us through our online forms (“Contact Data”) or when you use other services. We may also collect information when you submit your CV (“Employment Data”) and when you engage in a commercial relationship with us.

We also automatically collect information that your browser sends whenever you visit our website (“Log Data”).

Information We Collect About You

We may collect the following information from You:
- Account Data such as email, password, first and last name, company name, phone number (optional).
- Contact Data such as first and last name, email and phone number (optional).
- Log Data such as your computer’s Internet Protocol (“IP”) address, browser type, browser version, the pages of our site that you visit, the time and date of your visit, the time spent on those pages, and other statistics.
- Employment Data such as contact information, employment history, professional qualifications, and any other information provided through the CV.
- Marketing Data may include your preferences in receiving marketing communications from us and our third parties.

Uploading Personal Information

When using our Services, you may submit content, including images and other media, that contains Personal Information. Please exercise caution and ensure that you do not upload personal details about others without their awareness and consent. Additionally, refrain from sharing any intimate or sensitive information.

Purposes for Collecting Your Information

Information collected on our website is used for a variety of purposes, including providing you with our services, marketing, development, and promotion of our services, responding to questions for support and requests, sending security alerts if necessary, and providing information about us and our service offering. We may also use this information to monitor and analyze trends, usage, and activities in connection with the use of our sites and for marketing or advertising purposes.

Who We Share Your Information With

We do not share personal information with 3rd parties unless required to provide our services. In addition, we may use third-party services such as Google Analytics that collect, monitor, and analyze this type of information in order to increase our site's functionality. These third-party service providers have their own privacy policies addressing how they use such information. Graybox may disclose personal information in response to subpoenas, court orders, legal process, lawful requests by public authorities (including to meet national security or law enforcement requirements), or to establish or exercise our legal rights or defend against legal claims. We may also share such information if we believe it is necessary in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Service, or as otherwise required by law.

Transfer of Your Information

We are committed to ensuring the security and confidentiality of your personal data. Our company is based in France, and we utilize Amazon Web Services (AWS) data centers located in the Paris region (eu-west-3) for data storage and processing. This means that your personal data is stored and processed within the European Economic Area (EEA).

In accordance with the GDPR, when we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring that we use specific controls approved by the European Commission, which give personal data the same protection it has in Europe. For example, Model contracts for the transfer of personal data to third countries, Privacy Shield, or other approved methods.

How We Protect Your Information

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. Though we cannot ensure or guarantee that loss, misuse, or alteration of information will never occur, we ensure that all reasonable efforts and measures are in place to prevent it.

How Long We Retain Your Information

We have determined retention periods based on the purpose of the processing and the rules set forth within the GDPR, as well as the legal and business requirements. For example, the GDPR requires us to remove data when it has served its purpose and is no longer of use. We review the personal data we regularly collect to ensure that the personal data we have is up-to-date and is not retained longer than needed or required by the regulation.

If you wish to have more detailed information about our retention times, please contact us at hello@graybx.com.

Marketing

Graybox would like to send you information about products and services of ours that we think you might like.

If you have agreed to receive marketing, you may always opt out at a later date.You have the right at any time to stop Graybox from contacting you for marketing purposes.

If you no longer wish to be contacted for marketing purposes, please click “unsubscribe” on any of our emails.

What Are Your Data Protection Rights?

Graybox would like to make sure you are fully aware of all of your data protection rights.

Every user is entitled to the following:
- Right to access. You have the right to request Graybox for copies of your personal data. We may charge you a small fee for this service.
- Right to access. You have the right to request Graybox for copies of your personal data. We may charge you a small fee for this service.‍
- Right to rectification. You have the right to request that Graybox corrects any information you believe is inaccurate. You also have the right to request Graybox to complete the information you believe is incomplete.
- Right to erasure. You have the right to request that Graybox erases your personal data, under certain conditions.
- Right to restrict processing. You have the right to request that Graybox restricts the processing of your personal data, under certain conditions.
- Right to object to processing. You have the right to object to Graybox's processing of your personal data, under certain conditions.
- Right to data portability. You have the right to request that Graybox transfers the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: hello@graybx.com

How to Contact the Appropriate Authority

Should you wish to report a complaint or if you feel that Graybox has not addressed your concern in a satisfactory manner, you may contact the “Commission nationale de l'informatique et des libertés” (CNIL), France.

Cookies

Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology.

For further information, visit our cookies policy.

Privacy Policies of Other Websites

The Graybox website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Changes to Our Privacy Policy

Graybox keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on December 1st, 2025.

How to Contact Us

If you have any questions about Graybox’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us at hello@graybx.com.




‍


‍