Privacy policy

This Privacy Policy explains how the company iNrCy collects, uses, stores, protects and shares certain personal data as part of its website, its online software, its generators iNrCy, its application modules and third-party services connected by users.

It applies in particular to the website iNrCy, the application iNrCy, the generators iNrCy, the modules for publication, communication, statistics, customer relations, quotes, invoices, calendar, as well as connections activated by the user with third-party services such as Google, YouTube, TikTok, Pinterest, Meta, Facebook, Instagram, LinkedIn, Microsoft, Stripe or any other service necessary for the operation of the application.

Version updated on 7 September 2026.

1. Data controller

The company iNrCy, Simplified Joint Stock Company, whose head office is located at 1 rue de Fouquières, 62440 Harnes, France, may process personal data as part of its website, its online software and its associated services.

Contact: contact@inrcy.com

iNrCy acts as data controller for the data collected as part of:

• management of the website iNrCy;
• contact requests;
• free trial requests;
• commercial management;
• subscription management;
• invoicing;
• the support;
• security of the service;
• administration of the software iNrCy;
• user access management;
• managing connections to third-party services.

When iNrCy processes data on behalf of a professional user, in particular in the context of CRM, contacts, campaigns, quotes, invoices or customer data integrated into the application, iNrCy acts as a technical subcontractor within the meaning of the GDPR. The professional user then remains responsible for processing their own customer data, prospects, contacts, recipients and commercial documents.

2. Services concerned

This Privacy Policy applies to processing carried out within the framework of:

• from the website iNrCy;
• the contact request form;
• the free trial request form;
• online software iNrCy;
• from the generator iNrCy;
• the Booster / Publish, Grow, Retain, iNr’Send, iNr’Stats, iNrCalendar / Agenda, Quotes, Invoices, CRM, iNrBadge and iNr’Agent modules, when these features are available;
• generator rental or provision services iNrCy;
• rental, creation, management or sale of websites;
• associated digital services;
• connections to third-party services when the user activates them;
• APIs used to connect, publish, synchronize, analyse or display data from external platforms.

3. Data collected via the website

When a user visits the site iNrCy or fills out a form, iNrCy may collect the following data:

• name;
• first name;
• e-mail address ;
• telephone number;
• society;
• message transmitted;
• request made;
• date and time of sending;
• IP address;
• navigation data;
• type of device;
• pages viewed;
• source of demand;
• cookies or tracers depending on the chosen setting.

This data is used to respond to requests, manage free trials, ensure commercial monitoring, improve the site, secure exchanges, measure the audience when authorized and prevent abuse.

4. Data collected when requesting a free trial

As part of a free trial request, iNrCy may collect:

• name;
• first name;
• email;
• telephone;
• society;
• sector of activity;
• information related to professional activity;
• date of request;
• origin of the request;
• acceptance of the General Conditions of Subscription and Conditions of Use;
• familiarization with this Privacy Policy;
• consent to be contacted as part of the free trial request.

This data is used to process the request, prepare or activate access to the generator iNrCy, contact the requester, ensure commercial follow-up and secure the registration process.

5. Data of customers subscribed to the software iNrCy

As part of the use of the software iNrCy, iNrCy may process the following data concerning professional customers:

• name;
• first name;
• society;
• professional address;
• email;
• telephone;
• login credentials;
• contractual information;
• subscription information;
• billing information;
• configuration preferences;
• data related to the use of the software;
• history of actions performed in the application;
• connections to activated modules;
• connections to third-party services;
• tickets or exchanges with support;
• technical journals;
• security data;
• data necessary for technical diagnosis.

This data is necessary for account creation, use of the service, support, billing, security, abuse prevention, software improvement and contract execution.

6. Data processed in the CRM and commercial modules

The software iNrCy can allow professional users to manage contacts, prospects, customers, commercial actions, quotes, invoices, histories and customer relationship follow-ups.

In this context, the professional user can record data concerning his own customers, prospects or contacts, in particular:

• name;
• first name;
• society;
• postal address;
• e-mail address ;
• telephone number;
• commercial information;
• history of exchanges;
• expressed needs;
• quote requests;
• billing information;
• amounts;
• details of services;
• commercial documents;
• tracking statuses;
• internal notes;
• relaunch dates;
• action histories.

This data is entered, imported or used under the exclusive responsibility of the professional user.

iNrCy does not use professionals' CRM data for its own commercial purposes.

The professional user is responsible for the lawful origin of the data he enters in the application, for the information of his own customers and prospects, as well as for compliance with his obligations regarding the protection of personal data.

7. Quotes, invoices and commercial documents

The software iNrCy can allow the creation, sending, printing, tracking or logging of quotes and invoices.

The data processed may include:

• information from the professional;
• end customer information;
• contact details;
• services;
• amounts;
• taxes;
• dates;
• statutes;
• documents generated;
• sending histories;
• associated technical traces;
• information needed to view or download documents.

The professional user remains solely responsible for the content, accuracy, conformity, numbering, legal conservation and use of their quotes, invoices and accounting documents.

Invoices sent from the application can be protected against manual deletion in iNr’Send to ensure consistency of application history.

This protection does not replace the legal retention obligations of the professional.

8. Data related to Booster / Publish

The Booster / Publish module allows you to prepare, generate, adapt, schedule or publish content on different connected channels.

In this context, iNrCy can process:

• texts entered by the user;
• writing instructions;
• content generated or modified;
• titles;
• descriptions;
• action buttons;
• destination links;
• pictures;
• videos;
• technical file metadata;
• adapted formats;
• drafts;
• previews;
• selected channels;
• publication histories;
• publication statuses;
• technical errors or feedback from connected platforms.

Unless the offer changes, the application can allow the addition of a maximum of 5 images, with a target of 50 MB per image and 150 MB in total after optimisation, or 1 source video up to 300 MB. Beyond 50 MB per image or 75 MB for the video, iNrCy offers the creation of an optimised copy suitable for publication, without modifying the professional's original file.

The professional remains responsible for the content, images, videos, brands, texts, sounds, music, logos, documents and elements that he imports, generates, validates or publishes.

9. Data related to media, images and videos

Images, videos or files transmitted in the application can be used to:

• generate content;
• prepare a publication;
• adapt a format;
• create a preview;
• save a draft;
• publish to a connected channel;
• maintain a history in iNr’Send when intended;
• provide support or technical diagnosis in the event of an error;
• carry out a conversion or technical adaptation when the professional explicitly requests this functionality.

Video processing may involve a technical adaptation of the format or variant generation only when the professional chooses this adaptation for a channel.

iNrCy does not resell the media transmitted by its users.

The professional must ensure that he has the necessary rights to all the media used, in particular image rights, copyright, musical rights, trademark rights and possible commercial authorizations.

10. iNr’Send and application history

iNr’Send allows you to consult the history of certain actions carried out in the application, including posts, campaigns, emails, quotes, invoices or other elements depending on the activated features.

Unless there is a subsequent change to the offer or provision to the contrary, the display times in the history iNr’Send are as follows:

• Posts: 12 months;
• Propulsions: 12 months;
• Retain: 12 months;
• Emails: 12 months;
• Quote: 24 months;
• Bills: 24 months.

These durations only concern the display in the active history iNr’Send.

Old items can be automatically archived, hidden, or deleted from active history once the scheduled duration has been reached.

These periods do not constitute a guarantee of legal, tax or accounting retention of the professional's documents.

The professional remains responsible for the legal conservation of his own documents.

11. Data linked to emails and campaigns

The software iNrCy can allow the professional to connect one or more mailboxes, manage shipments, prepare communications, follow campaigns or use their CRM contacts.

In this context, iNrCy can process:

• connected email address;
• technical connection parameters;
• mailbox information necessary for operation;
• recipients;
• objects;
• message content;
• attachments;
• sending histories;
• statutes;
• technical errors;
• signatures;
• campaign data;
• unsubscribe data when the functionality is available;
• technical logs necessary for deliverability or diagnosis.

The professional remains responsible:

• the legal origin of his contacts;
• compliance with prospecting rules;
• recipient information;
• the management of unsubscriptions;
• the content of messages sent;
• the compliance of its campaigns;
• compliance with the rules applicable to commercial communications.

12. Connections to Third Party Services

The software iNrCy may allow the user to connect third-party services in order to enable certain features.

These connections may notably concern:

• Google;
• Google Business Profile;
• Google Calendar;
• Google Analytics 4;
• Google Search Console;
• YouTube ;
• YouTube API Services;
• TikTok;
• TikTok for Developers;
• ByteDance / TikTok ;
• Meta;
• Facebook ;
• Instagram;
• LinkedIn;
• Pinterest;
• Microsoft;
• courier services;
• email connection protocols or tools;
• accommodation services;
• payment services;
• artificial intelligence services;
• APIs necessary for the software to function;
• customer review or online reputation services when the user activates them.

After authorisation from the user, iNrCy can only access the data necessary for the operation of the requested service, in particular:

• account information;
• pages, business locations, calendars, channels, profiles, Pinterest boards, review listings or connected resources;
• data necessary for publication;
• statistical data;
• customer review data when the user connects a compatible platform;
• prints;
• clicks;
• views;
• performance indicators;
• engagement data;
• technical connection information;
• authentication tokens;
• statuses or feedback from platforms;
• technical errors;
• privacy or audience settings when the platform provides them.

This data is used exclusively to provide the functionalities requested by the user, display dashboards, publish content, synchronize information, analyse performance, ensure the proper functioning of the service and secure connections.

The user can revoke certain connections from their third-party account or from the software settings iNrCy when this option is available.

iNrCy does not guarantee the availability, stability or continuity of third-party services. Third-party services remain subject to their own terms of use, privacy policies, technical rules and API limitations.

13. Use of Google, YouTube and Google services APIs

The iNrCy software may use certain APIs Google and YouTube, including Google Business Profile, Google Calendar, Google Analytics 4, Google Search Console, YouTube API Services or other APIs Google necessary for user-activated features.

These services are used only when the user chooses to connect their account Google, YouTube or a compatible Google service to iNrCy.

Depending on the activated features, iNrCy may access, collect, store or process only the data necessary for the operation of the requested service, in particular:

• account information Google connected;
• account, establishment, calendar, channel YouTube or connected resource identifiers;
• name, address, public or professional information of an establishment Google Business Profile when necessary;
• data necessary for the preparation, sending or publication of content;
• titles, descriptions, texts, images, videos, links, publication or privacy settings;
• calendar data;
• statistical data;
• visibility data;
• views, impressions, clicks, interactions and performance indicators;
• API statuses, errors and technical feedback;
• authentication tokens necessary for secure connection;
• data strictly necessary for displaying the resources available in the iNrCy interface.

This data is used only to provide functionality requested by the user, including:

• connect your account Google or YouTube;
• display available resources;
• prepare a publication;
• publish content;
• display or synchronize information;
• display statistics;
• analyse performance;
• prepare recommendations visible in the interface;
• ensure the proper technical functioning of the service;
• secure access;
• diagnose errors.

Data obtained through the Google or YouTube APIs is not sold, rented, transferred to data brokers, used for advertising, ad retargeting, ad profiling or creditworthiness determination.

iNrCy only transfers, shares or discloses Google or YouTube data to third parties in the following strictly necessary cases:

• at Google or YouTube to perform the action requested by the user;
• to the technical service providers necessary for the operation of the application, in particular hosting, database, storage, security, technical logs, support or execution of functionalities;
• to connected services explicitly chosen by the user;
• to an artificial intelligence provider only when the user uses an assistance or generation functionality requiring this processing, and only to provide the requested functionality;
• to the competent authorities when required by law.

The technical service providers that may be involved in the processing of data Google or YouTube include, depending on the functionalities used:

• OVHcloud;
• Vercel;
• Supabase;
• Google;
• YouTube ;
• OpenAI when the user uses a helper or generation feature requiring this processing;
• Stripe when necessary for subscription management;
• Microsoft, Meta, LinkedIn, TikTok / ByteDance or other third-party services only when the user voluntarily connects or uses these services;
• messaging, security, support or infrastructure providers necessary for the operation of the application.

iNrCy applies a principle of minimization: only the authorizations necessary for the functionalities actually available and used are requested.

iNrCy complies with the limited use rules applicable to user data Google. The data Google is only used to provide or improve the functionalities visible and requested by the user.

iNrCy does not use Google or YouTube data to train general artificial intelligence models.

iNrCy does not allow its employees or contractors to manually read Google or YouTube data, except in the following cases:

• explicit agreement from the user for a support or diagnostic request;
• need for security;
• legal obligation;
• aggregated or anonymized data used for the internal functioning of the service.

The user can revoke iNrCy's access to their account Google or YouTube at any time from the security settings of their account Google, or from the software settings iNrCy when this option is available.

The user can also request the deletion of the data concerned by contacting iNrCy at the address: contact@inrcy.com.

14. Specific use of YouTube

When the user connects a channel YouTube or uses a feature YouTube in iNrCy, the application may process data necessary for preparing, sending, publishing, displaying or tracking content YouTube.

This data may include:

• string id YouTube;
• account or connected channel information;
• video titles or Shorts;
• descriptions;
• video media;
• possible miniatures;
• privacy settings;
• publication statuses;
• visibility or performance statistics when these data are available;
• API technical errors or returns YouTube;
• Authentication tokens necessary for the secure operation of the connection.

This data is used only to allow the user to manage the YouTube functionalities activated from iNrCy.

Use of the YouTube features in iNrCy involves the use of the YouTube API Services. The user also remains subject to the Terms of Use of YouTube, the Terms of Use of YouTube API Services and the Privacy Policy of Google.

The user remains responsible for the content that he imports, prepares, validates or publishes on YouTube from iNrCy, as well as for compliance with the rules YouTube, copyright, image rights, music rights, trademark rights and the confidentiality of the people appearing in the content.

iNrCy does not sell user data YouTube and does not use it for its own advertising purposes.

15. Use of the API TikTok

The iNrCy software may allow the user to connect their TikTok account in order to prepare, send, publish or track certain content via the TikTok APIs made available by TikTok for Developers.

When the user connects their account TikTok, iNrCy can access or process only the data necessary for the functioning of the activated features, in particular:

• account identifier TikTok authorized;
• username;
• nickname;
• avatar of the creator when this information is provided by the API;
• authentication tokens necessary for secure connection;
• privacy settings available for publishing;
• parameters related to comments, duets, collages or interactions when this information is provided by TikTok;
• content prepared or sent to TikTok;
• texts, captions, hashtags, images, videos and technical metadata;
• publication statuses;
• API technical errors or returns TikTok;
• quotas or technical limitations returned by TikTok.

This data is used only to allow the user to connect their account TikTok, prepare content, view available options, send media, publish content or track the status of a publication.

Content published or transmitted to TikTok is sent to TikTok / ByteDance to enable the execution of the action requested by the user.

iNrCy does not sell users' TikTok data, does not rent it or use it for its own advertising purposes.

iNrCy only transmits data TikTok to third parties when necessary:

• to provide the functionality requested by the user;
• to ensure the hosting, storage, security or technical operation of the service;
• to carry out an action explicitly requested by the user;
• to comply with a legal obligation.

The user remains responsible for the content that he prepares, imports, validates or publishes on TikTok from iNrCy, as well as compliance with the rules applicable on TikTok, copyright, image rights, musical rights, trademark rights and the confidentiality of the people appearing in the content.

The user can revoke iNrCy's access to their account TikTok from their account settings TikTok or from the software settings iNrCy when this option is available.

The user can also request the deletion of the data concerned by contacting iNrCy at the address: contact@inrcy.com.

16. Use of the API LinkedIn

The software iNrCy may allow the user to connect their account LinkedIn in order to prepare, publish, synchronize or track certain content via the APIs made available by LinkedIn.

When the user connects their account LinkedIn, iNrCy can access or process only the data necessary for the functioning of the activated features, in particular:

account identifier LinkedIn authorized;

first and last name associated with the account when this information is provided by the API;

profile photo or avatar when this information is provided by the API;

public information of the authorized profile;

identifiers of pages, organizations or resources LinkedIn administered or accessible by the user;

content prepared or sent to LinkedIn;

texts, captions, images, videos, links, hashtags and technical metadata;

publication statuses;

statistical data or performance indicators when these data are available;

impressions, clicks, views, reactions, comments or other engagement data when this information is provided by LinkedIn;

authentication tokens necessary for secure connection;

API technical errors or returns LinkedIn.

This data is used only to allow the user to connect their LinkedIn account, view available resources, prepare content, publish content, track the status of a publication, display statistics or ensure the correct technical functioning of the LinkedIn features in iNrCy.

Content published or transmitted to LinkedIn is sent to LinkedIn to enable the execution of the action requested by the user.

iNrCy does not sell or rent user LinkedIn data, does not use it for its own advertising purposes, or uses it to train general artificial intelligence models.

iNrCy only transmits data LinkedIn to third parties when necessary:

to provide the functionality requested by the user;

to ensure the hosting, storage, security or technical operation of the service;

to carry out an action explicitly requested by the user;

to provide technical support or diagnosis with the user’s consent;

to comply with a legal obligation.

The user remains responsible for the content that he prepares, imports, validates or publishes on LinkedIn from iNrCy, as well as compliance with the rules applicable on LinkedIn, copyright, image rights, trademark rights and the confidentiality of the persons appearing in the content.

The user can revoke iNrCy's access to their account LinkedIn from their account settings LinkedIn or from the software settings iNrCy when this option is available.

The user can also request the deletion of the data concerned by contacting iNrCy at the address: contact@inrcy.com.

17. Use of the API Pinterest

The iNrCy software may allow the user to connect their own account Pinterest using the official OAuth authorisation flow to manage the features they enable in iNrCy.

Depending on the actions requested by the user, iNrCy may retrieve in real time the strictly necessary information provided by Pinterest, including the connected account profile, available boards, relevant Pins and accessible performance metrics.

Information retrieved from the Pinterest API, including profile information, board lists and statistics, is accessed on demand to provide the relevant feature and is not permanently retained as a copy of Pinterest data. iNrCy retains only the elements required for the secure operation of the service, including encrypted OAuth tokens, its own internal data linked to actions explicitly requested by the user and, when chosen by the user, the technical identifier of the board set as the default destination. Board names and lists continue to be retrieved live from Pinterest.

Actions to create, edit or delete a board or Pin are performed only following an explicit action by the user in iNrCy. When publishing, the default board is preselected and the user may choose another destination before submitting.

Content transmitted to Pinterest is sent to Pinterest in order to perform the requested action. Pinterest statistics displayed in iNrCy are retrieved live when the feature is viewed.

iNrCy does not sell or rent Pinterest user data, does not use it for its own advertising purposes, or uses it to train general artificial intelligence models.

The user remains responsible for the content that he prepares, imports, validates or publishes on Pinterest from iNrCy, as well as compliance with the rules applicable on Pinterest, copyright, image rights, trademark rights, media rights and the confidentiality of the persons appearing in the content.

The user can revoke iNrCy's access to their account Pinterest from their account settings Pinterest or from the software settings iNrCy when this option is available.

The user can also request the deletion of the data concerned by contacting iNrCy at the address: contact@inrcy.com.

18. Use of artificial intelligence technologies

The software iNrCy may integrate functionalities based on artificial intelligence technologies, in particular for:

• generate posts;
• propose formulations;
• adapt texts;
• analyse an intention;
• exploit elements provided by the user;
• prepare marketing or commercial content;
• propose recommendations;
• analyse statistics;
• help prepare certain actions in the application.

In this context, certain information provided by the user may be transmitted to an artificial intelligence technical service provider in order to generate the requested content.

This information may include, depending on usage:

• company name;
• sector of activity;
• description of services;
• writing instructions;
• entered text;
• media provided;
• publication context;
• statistics or information necessary for the requested analysis;
• information necessary for the requested generation.

The data transmitted to these services is used to provide the requested functionality.

iNrCy recommends that users do not include sensitive, confidential or unnecessary data in generation requests.

The content generated must be verified by the professional before any use, publication, sending or broadcast.

Except for functionality expressly activated by the user, iNrCy does not transmit data from connected services such as Google, YouTube or TikTok to an artificial intelligence provider.

19. Payments

Payments may be processed by Stripe or any other payment provider accepted by iNrCy.

iNrCy does not store full credit card data.

The payment provider may process in particular:

• name;
• email;
• billing address;
• means of payment;
• transaction history;
• payment status;
• information necessary for fraud prevention;
• information necessary for subscription management.

These processing operations are necessary for the management of subscriptions, payments, invoices and payment incidents.

20. Websites offered in addition

iNrCy may offer the rental, provision, creation, maintenance, management or sale of websites.

In this context:

• the professional operating the site remains responsible for the data collected from its own visitors, prospects or customers;
• iNrCy acts as a technical service provider, host, administrator, maintainer or subcontractor depending on the service provided;
• the professional must ensure that his site complies with applicable obligations, particularly in terms of legal notices, confidentiality, cookies, prospecting and forms.

When iNrCy provides or administers a site on behalf of a professional, certain technical data, forms, statistics, contact requests or information necessary for the operation of the site may be processed as part of the service.

21. Purposes of processing

Personal data may be processed for the following purposes:

• Management of contact requests: legitimate interest or consent as appropriate;
• Management of free trial requests: pre-contractual measures and consent to contact;
• Management of SaaS subscriptions: execution of the contract;
• Creation and management of the user account: execution of the contract;
• Payment and invoicing: execution of the contract and legal obligations;
• Customer support: execution of the contract and legitimate interest;
• Security of the service: legitimate interest;
• Fraud prevention: legitimate interest;
• Multi-channel publishing: contract execution;
• Connection to third-party services: execution of the contract and authorisation of the user;
• Use of APIs Google, YouTube, TikTok, LinkedIn, Pinterest: execution of the contract and user authorisation;
• CRM management: execution of the contract between iNrCy and the professional user;
• Processing of the professional's customer data: subcontracting on behalf of the professional;
• Creation of quotes and invoices: execution of the contract;
• Sending emails and campaigns: execution of the contract and responsibility of the professional;
• Content generation by AI: execution of the contract;
• Statistics and recommendations: contract execution;
• Improvement of the service: legitimate interest;
• Site audience measurement: consent, unless applicable exemption;
• Non-necessary cookies: consent;
• Compliance with legal obligations: legal obligation;
• Dispute management: legitimate interest.

22. Data recipients

The data may be accessible, depending on the needs and the functionalities used, to the following recipients:

• authorized personnel of iNrCy;
• accommodation providers;
• infrastructure providers;
• database providers;
• payment providers;
• artificial intelligence providers;
• third-party services connected by the user;
• publishing platforms;
• messaging providers;
• security tools;
• support tools;
• audience measurement tools;
• maintenance providers;
• administrative or judicial authorities when required.

The providers or services may notably include, depending on the services used:

• OVHcloud;
• Vercel;
• Supabase;
• Stripe;
• OpenAI;
• Google;
• Google Business Profile;
• Google Calendar;
• Google Analytics;
• Google Search Console;
• YouTube ;
• YouTube API Services;
• TikTok;
• TikTok for Developers;
• ByteDance / TikTok ;
• Microsoft;
• Meta;
• Facebook;
• Instagram;
• LinkedIn;
• Pinterest;
• courier services;
• technical suppliers necessary for the operation of the application.

iNrCy does not sell its users' personal data.

iNrCy only shares data with third parties when necessary for the operation of the service, the execution of a functionality requested by the user, compliance with a legal obligation, security or support.

23. Transfers outside the European Union

Some third-party providers or services may involve data transfers outside the European Union.

When necessary, these transfers are governed by appropriate guarantees, such as:

• standard contractual clauses approved by the European Commission;
• adequacy decisions;
• additional contractual, technical or organizational measures;
• mechanisms recognized by the applicable regulations.

The user acknowledges that certain connected third-party platforms, including Google, YouTube, TikTok, Pinterest, Meta, LinkedIn, Microsoft, Stripe or OpenAI, may process certain data according to their own conditions, privacy policies and technical infrastructures.

24. Retention periods

The data is kept for a period adapted to its purpose.

Contact requests: up to 3 years after the last exchange;

Prospects: up to 3 years after the last active contact;

Free trial data: up to 3 years after the last contact, unless subscribed;

Subscriber customers: duration of the contract then archiving according to applicable obligations;

Billing data iNrCy: applicable legal duration;

Accounting documents iNrCy: 10 years;

CRM data entered by the professional: duration defined by the professional and by the operation of the application;

Posts iNr’Send: 12 months displayed in active history;

Propulsions iNr’Send: 12 months displayed in active history;

Loyalties iNr’Send: 12 months displayed in active history;

Emails iNr’Send: 12 months displayed in active history;

iNr’Send quotes: displayed in the active history for 24 months;

Invoices iNr’Send: 24 months displayed in active history;

Technical logs: up to 12 months, unless necessary for security, proof or diagnosis;

Authentication tokens for third-party services: duration required to maintain the connection, until revocation by the user or deletion of the account;

Audience measurement cookies: depending on the settings and applicable regulations;

Cookie consent preferences: limited duration in accordance with applicable recommendations;

Data necessary for proof: applicable limitation period.

The display times in iNr’Send do not replace the professional's legal retention obligations.

The professional remains responsible for the legal conservation of his own documents, in particular accounting, tax and commercial documents.

25. Security

iNrCy implements technical and organizational measures intended to protect personal data, in particular:

• secure connection;
• restricted access;
• authentication;
• secure storage of access tokens;
• limitation of internal access;
• backups;
• technical logging;
• infrastructure monitoring;
• abuse prevention measures;
• logical separation of data;
• support interventions limited to necessary needs;
• protection of administrator access;
• control of user rights;
• diagnostic measures in the event of an error.

Despite these measures, no IT system can guarantee absolute security.

The user must also protect their usernames, passwords and access to connected third-party services.

The user is prompted to revoke connections to third-party services that they no longer use.

26. Cookies and trackers

The website iNrCy may use:

• technical cookies necessary for the operation of the site;
• security cookies;
• audience measurement cookies;
• cookies or trackers subject to consent when required.

Non-necessary cookies are only placed after consent when this is required.

The user can accept, refuse or configure cookies via the module provided for this purpose when it is available.

Refusing unnecessary cookies does not prevent access to the site.

27. Rights of individuals

In accordance with applicable regulations, any data subject may exercise the following rights:

• right of access;
• right of rectification;
• right of erasure;
• right to restriction of processing;
• right of opposition;
• right to portability;
• right to withdraw consent when processing is based on it;
• right to define directives relating to the fate of their data after their death.

Requests can be sent to:

contact@inrcy.com

For security reasons, iNrCy may request proof of identity when necessary.

When a request concerns data processed by iNrCy on behalf of a professional user, iNrCy may redirect the request to the professional concerned, responsible for the processing.

The person concerned can also contact the CNIL.

28. Revocation of connections to third-party services

User can revoke connections to third-party services connected to iNrCy.

Depending on the service concerned, the revocation can be carried out:

from the software settings iNrCy when this option is available;

from account settings Google;

from the settings of the YouTube account or the associated Google account;

from account settings TikTok;

from account settings LinkedIn;

from account settings Pinterest;

from account settings Facebook;

from account settings Instagram;

from the settings of other connected third-party services.

After revocation, certain functionalities related to the service concerned may no longer function.

Revocation of access does not necessarily result in the immediate deletion of all data already necessary for history, proof, billing, security or compliance with legal obligations.

The user can request the deletion of the data concerned at the address: contact@inrcy.com.

29. Account deletion

The user can request the deletion of their account iNrCy by contacting iNrCy at the address: contact@inrcy.com.

Deletion of the account may result in the deletion or archiving of associated data, subject to:

• legal retention obligations;
• data necessary for proof;
• data necessary for invoicing;
• data necessary for security;
• data processed on behalf of a professional user;
• technical backup or archiving deadlines.

When iNrCy acts as a subcontractor on behalf of a professional user, certain requests may have to be sent directly to the professional concerned.

30. Minors

The services iNrCy are intended exclusively for adult professionals.

No service iNrCy is intended for minors.

Any data concerning a minor may be deleted upon request where applicable.

31. Connecting to and publishing on X

When a user connects X, iNrCy uses OAuth 2.0 with PKCE and requests only the tweet.read, users.read, tweet.write, media.write and offline.access permissions.

iNrCy may receive the authenticated X account ID, display name, username, bio, stated location, URL, avatar, public metrics and verification status. Required connection identifiers, permissions, expiry data and access or refresh tokens are stored, with tokens encrypted at rest.

This data is used to display connection status and, on request, prepare, schedule, publish or delete the professional’s X posts with text, up to four images, one video or one GIF within available limits. iNrCy does not request access to direct messages, email, contacts or follows on the X account.

Selected content and media are sent to X and are also governed by X rules and policies. Disconnecting or revoking ends future access and removes the local connection; the user may also revoke iNrCy from X. iNrCy does not use X data for surveillance, off-service advertising targeting or general AI model training.

32. Facebook and Instagram Reels and Stories

When the professional selects Classic, Reel or Story, iNrCy sends Meta only the identifiers, tokens and media required. For a Reel or Story, only the media is published: the title, text and CTA are not sent.

One or more images may be converted into an approximately eight-second 1080 × 1920 vertical mini-video with iNrCy music; a supplied video may be technically adapted. Availability depends on the account, permissions and Meta APIs. The professional remains responsible for rights in images, videos and audio.

33. iNrStudio: AI-generated images, videos and voices

Depending on the selected mode, iNrCy may send the prompt, elements of the professional DNA, brand or profile data, reference media and necessary format, duration or voice preferences to the Google AI services used by iNrStudio, including Gemini, Omni, Veo and speech synthesis.

Voices are synthetic and the service does not offer voice cloning. Users must hold the necessary rights and consents for every referenced person or medium. To check audio consistency, short extracts may be transcribed temporarily; their raw transcript is not displayed, logged or stored separately by iNrCy.

Providers may apply safety filters. Generated output may contain errors, approximations or incomplete elements and must be reviewed and approved by the professional before use or publication.

34. Dictation, transcription and automatic correction

The microphone is activated only after the user acts and grants permission. Depending on the browser, recognition may be performed by the browser’s speech service; otherwise audio or recognised text may be sent through iNrCy infrastructure and Vercel AI Gateway to an authorised transcription and correction provider, currently using OpenAI models.

Correction targets spelling, punctuation, agreement and capitalisation without intentionally changing meaning. Temporary technical audio files are deleted after the operation; inserted text then follows the retention rules of the relevant field. Browser and provider processing remains subject to their applicable policies.

35. Business DNA and Recent news

At the professional’s request, DNA analysis may read accessible professional content from their website, iNrCy site and authorised connected channels, including Google Business, Facebook, Instagram, LinkedIn, TikTok, YouTube, Pinterest, iNrSearch and iNrCy posts. Relevant extracts may be sent to the AI provider for analysis.

The News tab may retain up to four distinct facts from dated posts from the previous thirty days, with source and period, excluding review authors, private data and OAuth identifiers. Items stored in DNA may then provide context for requested media, content and iNrAgent actions; the professional may correct or delete them.

36. WhatsApp CTA and News widget

The WhatsApp CTA does not connect a WhatsApp account and provides no access to messages. iNrCy normalises the supplied business number and creates a wa.me link that may be included in a post; the number and link are then sent to selected channels, and WhatsApp processes the link when it is opened under its own rules.

The News widget uses a signed token bound to the domain, account and source to display public iNrCy news on an authorised website; the token does not grant dashboard access. A visitor’s browser contacts iNrCy and technical connection data may be processed to deliver and secure the display. The professional remains responsible for notices required on their website.

37. Changes to this policy

This Privacy Policy may be modified at any time to take into account developments in the site, software, services, modules, APIs used, regulations or service providers.

The applicable version is that published on the website and/or in the software iNrCy at the time of consultation.

In the event of a significant change regarding the use of data from connected third-party services, in particular Google, YouTube, TikTok, LinkedIn, Pinterest, iNrCy may inform affected users and request new authorisation when necessary.

The French version constitutes the reference legal version. Translations are provided for informational purposes; in the event of a discrepancy, the French version prevails.