Privacy
Last updated: December 3, 2025
Data Controller
The data controller is HiddenQ, a French simplified joint-stock company (SASU) with share capital of €9,000, registered office at:
114 avenue Jean Jaurès, 76140 Le Petit-Quevilly, France.
HiddenQ acts as:
Data controller for account, billing and platform usage data.
Data processor for business data that you import or connect to the platform.
Categories of Data Processed
We may process the following categories of data:
Identification data: first name, last name, professional email address, login details.
Billing data: billing contact details and payment information handled via a secure payment provider.
Technical data: IP addresses, login logs, technical identifiers, and essential cookies required for the service (including the session cookie HQ_S).
Business data voluntarily imported: files, exports, business datasets, and any content you connect to the platform. You remain the owner of this data; HiddenQ acts as a processor under GDPR.
HiddenQ may process additional categories of data if necessary to provide or improve its services. In that case, users will be informed in line with this policy.
Purposes and Legal Bases
Your data is used only for the following purposes:
Providing access to the platform and its features.
Generating analyses, dashboards and indicators from the data you import.
Managing subscriptions, payments and the commercial relationship.
Ensuring the security and proper functioning of the service.
Responding to support and assistance requests.
These processing activities are based on:
Performance of a contract: providing the HiddenQ service to you or your organisation.
Legitimate interest of HiddenQ: improving the product, ensuring security, understanding usage.
Compliance with legal obligations: accounting, tax and security obligations where applicable.
HiddenQ does not sell your data and does not share it with unauthorised third parties.
Cookies
The website and application use essential cookies, including:
HQ_S: a session cookie required for authentication and secure access to your account.
No advertising cookies are used.
If analytical cookies (e.g. Google Analytics) or support cookies (e.g. live chat tools) are added in the future, users will be informed and, where required by law, explicit consent will be requested.
Security and Hosting
Data is hosted on Microsoft Azure infrastructure located in France.
HiddenQ implements appropriate security measures, including:
Encryption of data in transit and, where applicable, at rest.
Access control and role-based permissions by organisation.
Logical segregation between environments and between clients.
Logging and monitoring of access and system activity.
Each organisation has its own logically separated data space, ensuring its data is not accessible to other customers.
Your Rights
In accordance with GDPR, you have the following rights over your personal data:
Right of access.
Right to rectification.
Right to erasure (“right to be forgotten”), within legal limits.
Right to restriction of processing.
Right to data portability, where applicable.
Right to object to certain processing based on legitimate interest.
To exercise your rights, you can contact: team@hiddenq.ai
You also have the right to lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority, if you believe your rights are not being respected.
Data Retention
Account and subscription data are kept for as long as your account is active.
When an account is deleted or a contract ends, data is deleted or anonymised within a maximum of 30 days, unless a longer retention period is required by law (for example, accounting or legal obligations).
Log data may be retained for a limited period for security and audit purposes.
Change to this Policy
This privacy policy may be updated to reflect changes in the platform or in applicable regulations.
The date of the latest update will be indicated on the page, and material changes may be specifically communicated to users.