Privacy policy.
This translation is provided for information only. The French version of this document is the only legally binding version.
What we collect, why, and for how long — in plain language.
What we collect on this website
The indusiax.com website sets no advertising tracking cookies. The only personal data collected is the data you voluntarily enter in the trial and contact forms: name, company, email address, telephone number and your message.
Why we collect it
Solely to process your request: setting up your trial workspace, sending you your login details, replying to your message. Legal basis: pre-contractual measures taken at your request (art. 6(1)(b) GDPR). Your contact details are never sold on, nor used for prospecting without your consent.
Where and for how long
Requests are stored on our servers hosted in the European Union (Hostinger) and kept for a maximum of 24 months after the last contact, then deleted.
In the Indusiax applications
Each application (Stator-CRM, Rotor-FSM, Vector-MOM, Flux-Link) has its own privacy policy and, for business customers, a data processing agreement (DPA) listing the sub-processors used (hosting, transcription, AI). They are available from each application or on request at contact@indusiax.com.
Google Calendar data (Vector-MOM)
If you choose to connect your Google Calendar to Vector-MOM, the application reads your events in read-only mode (scope calendar.readonly), solely to display them in the application and to let you create a meeting from an appointment in one click. No event is created, modified or deleted. We store only the connection tokens (revocable at any time from the application or from your Google account) and, when you create a meeting from an event, its title, its list of participants and its identifier. The use of data received from Google APIs complies with the Google API Services User Data Policy, including its “Limited Use” requirements: this data is never used for advertising, never sold or transferred to third parties, and never used to train artificial intelligence models.
How this data is protected
- Encrypted connection (HTTPS/TLS) across the entire website and application.
- Google access tokens are stored server-side, accessible only to the owning account, and are never displayed in the interface or passed on to a third party.
- Minimum access scope: read-only (calendar.readonly), no write access to your calendar is possible.
- Immediate revocation at any time, from the application (“Disconnect” button) or directly from your Google account.
- Indusiax account passwords are hashed (never stored in plain text), and data is segregated by user account.
Artificial intelligence used by Vector-MOM
Audio transcription of meetings relies on a self-hosted AI model (faster-whisper, open source), run entirely on our own servers. The audio of your meetings is therefore never sent to a third-party service for this step — no internet connection is even needed for transcription. Only the drafting of the minutes (transcribed text only, never the audio) uses an external provider, Mistral AI (France), whose standard offering does not use the data sent to train its models.
Your rights
You have the right to access, rectify, erase and restrict the processing of your data, and to object to it. To exercise these rights: contact@indusiax.com. You may also lodge a complaint with the CNIL (France's data protection authority, cnil.fr).
Last updated: 8 August 2026.