Privacy Policy
What personal data we collect when you use this website, why we collect it, who we share it with, how long we keep it, and the rights you can exercise over it.
Last updated: 4 August 2026
Who we are
PVDS GROUP, a SASU registered at 130 route de la Vesancière, 01170 Vesancy, France, publishes this website under the Flares brand. We are the data controller for the processing described below — meaning we decide why and how your data is used.
For anything relating to your personal data, write to privacy@flares.tech. We have not appointed a Data Protection Officer, so that address reaches us directly. Full company details are on our Legal Notice page.
What this policy covers
This policy covers the public website at www.flares.tech: browsing it, using the free tools and templates, downloading our resources, and asking for early access.
The Flares product itself is in private beta and is not covered here. When it opens more widely, a separate notice will describe the data processed inside the product on behalf of our customers.
What we collect, why, and on what legal basis
We only collect what a given feature actually needs. Here is every category of data this website processes.
| What we collect | Why | Legal basis | How long we keep it |
|---|---|---|---|
| Technical data — IP address, browser and device type, pages requested, referring page | Deliver the site, keep it available and secure, and prevent abuse of our forms | Our legitimate interest in running a secure, working website | Server logs are kept for a limited period by our host. The anti-abuse counter on our forms holds an IP address for 60 seconds and then discards it |
| Usage data — pages viewed, links and buttons clicked, how far you scroll, approximate location derived from your IP address, device and browser, the page that referred you, and a pseudonymous identifier | Understand how the site is used so we can improve the content and the navigation | Your consent, given through the cookie banner | Trackers expire after 13 months at most; the measurement data is kept for 25 months at most |
| Resource requests — your professional email address, which resource you asked for, your IP address, and the content you entered into the tool | Send you the resource you asked for, prevent abuse of the download forms, and contact you about Flares | Our legitimate interest in responding to your request and in promoting our services to business contacts | 3 years from your last contact with us |
| Early access requests — your professional email address, company name, type of business, and company size | Manage the private beta waiting list and contact you about access | Steps taken at your request before entering into a contract | 3 years from your last contact with us |
One point is worth stating plainly, because it may not be obvious. Our free tools — the SWOT builder, the ICP template, the pricing matrix and the others — run entirely in your browser while you fill them in, and nothing leaves your device at that stage. But when you enter your email address to export the result, the content you typed into the tool is sent with it and stored next to your email. So please do not put confidential information into them. Our downloadable templates behave differently: they send only which template you exported and in which format, never its contents.
We do not buy, rent or enrich contact data from third parties. Everything we hold about you, you gave us directly.
Whether you have to give us your data
You can read every page of this site — the glossary, the guides, the sources, the research — without giving us anything at all.
A professional email address is required to export a free tool or download a gated resource, because that is how we deliver it; without one we cannot send it to you. The fields on the early access form are required so we can assess and manage waiting-list requests. Nothing else on this site asks for personal data.
Who we share your data with
We do not sell your personal data, and we do not share it for anyone else's advertising. We use a small number of service providers who process data on our instructions:
| Provider | What it does for us | Where it processes data |
|---|---|---|
| Vercel Inc. | Hosts this website and provides basic traffic measurement | United States |
| PostHog | Audience measurement — how the site is used | European Union |
| Stores resource and early access requests in a spreadsheet we use to follow up | United States |
We may also disclose data to our professional advisers, or to a public authority or court, where we are legally required to do so.
Transfers outside the European Union
Our audience measurement runs in PostHog's European Union region, so that data stays in the EU.
Vercel and Google are established in the United States. Transfers to them rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework where the provider is certified under it, and on the European Commission's standard contractual clauses otherwise. You can ask us for a copy of the safeguards that apply.
How long we keep your data
We keep data only as long as it is useful for the purpose it was collected for, and then delete it:
- Email addresses and the records attached to them: 3 years from your last contact with us, in line with the CNIL's reference for prospect data. Any contact — a new download, a reply to an email — restarts that period.
- Audience measurement data: 25 months at most, and the trackers that collect it expire after 13 months at most.
- Technical server logs: a limited period, for security and troubleshooting.
- The anti-abuse counter on our forms: 60 seconds.
Your rights
Under the GDPR and the French Data Protection Act, you can:
- Access your data and get a copy of it
- Correct it if it is wrong or out of date
- Erase it, where the law allows
- Restrict how we use it while a question about it is resolved
- Receive it in a portable format, or have it sent to another provider, where that right applies
- Object to processing based on our legitimate interest — including, at any time and without giving a reason, to receiving commercial messages from us
- Withdraw your consent at any time, where we rely on it, without affecting what we did before you withdrew it
- Set directives on what should happen to your data after your death, either generally with a certified digital trustee or specifically with us
To exercise any of these, write to privacy@flares.tech or to PVDS GROUP, 130 route de la Vesancière, 01170 Vesancy, France. We reply within one month; if a request is complex we may extend that by two months and will tell you why. If we have genuine doubt about who is asking, we may ask you for something that confirms your identity.
Complaining to the CNIL
If you think we have handled your data wrongly, we would rather you told us first so we can put it right. You also have the right to complain to the French data protection authority, the CNIL, at any time — online at cnil.fr/fr/plaintes, or by post to Commission nationale de l'informatique et des libertés, Service des plaintes, 3 place de Fontenoy, 75007 Paris.
Automated decisions and profiling
We do not make decisions about you by purely automated means, and we do not build profiles of you. Our audience measurement tells us how pages perform, not who you are.
How we protect your data
The site is served entirely over HTTPS. Access to the systems holding your data is restricted to the people who need it, and our providers are chosen for the security they offer. No system can be completely secure, but if a breach ever put your rights at serious risk we would notify you and the CNIL as the law requires.
Children
This site is aimed at professionals and is not intended for anyone under 15, the age of digital consent in France. We do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.
Changes to this policy
We update this policy when what we do with data changes. The date at the top always tells you which version you are reading. If a change materially affects you, we will make it clear on the site rather than leave you to spot it.
Contact
Questions about this policy or about your data: privacy@flares.tech. Anything else: contact@flares.tech. By post: PVDS GROUP, 130 route de la Vesancière, 01170 Vesancy, France.