Version françaiseBook a demo

Legal information

Privacy policy

This website does not track you: no cookies, no audience measurement, no third-party service. It only processes the data you choose to send us, and the server’s technical logs.

Data controller

GRAAL.SYSTEMS SAS, 251 boulevard Pereire, 75017 Paris, France, registered with the Paris Trade and Companies Register under number 922 569 322. For any question about your data: contact@graal.systems.

No cookies, no trackers

This website sets no cookies. It loads no audience measurement tool, no advertising pixel, no font, no captcha and no other third-party service.

If you choose light or dark mode, that choice is stored in your browser (local storage, key graal-mode) so it is remembered on your next visit. It is never sent to the server, and you can clear it from your browser settings.

The contact form

The form on the Demo page prepares an email in your own mail app. Nothing goes through this website’s server: the information leaves your device for contact@graal.systems only when you send the email yourself.

Processing, purposes, legal bases and retention

Contact and demo requests

Data:
Name, email address, organization, job title, message content.
Purpose:
Answer your request, organize a demo, prepare an estimate, follow up on the relationship.
Legal basis:
Pre-contractual steps taken at your request (Art. 6(1)(b)); legitimate interest in following up on the relationship (Art. 6(1)(f)).
Retention period:
3 years from our last exchange.

Job applications

Data:
Identity, contact details, CV, message and links you send.
Purpose:
Review your application and answer you.
Legal basis:
Pre-contractual steps taken at your request (Art. 6(1)(b)).
Retention period:
2 years from our last exchange, unless you ask for earlier deletion.

Security reports

Data:
Email address, name or pseudonym, report content.
Purpose:
Analyze and fix the vulnerability, keep you informed, credit you if you wish.
Legal basis:
Legitimate interest in securing the software and the website (Art. 6(1)(f)).
Retention period:
3 years after the fix is published.

Server technical logs

Data:
IP address, date and time, requested page, response code, declared browser.
Purpose:
Keep the website secure and available, diagnose incidents.
Legal basis:
Legitimate interest in securing the website (Art. 6(1)(f)).
Retention period:
28 days.

An email address is required for us to answer you; the other information is optional. Your data is not subject to any automated decision-making or profiling, and it is never sold.

Recipients

Your data is accessible only to the people at GRAAL.SYSTEMS SAS who need it to handle your request. It is also processed on our behalf, as processors, by the website’s hosting provider, MOJI SAS (technical logs), and by Microsoft (Microsoft 365), our email service provider (emails received). Microsoft may process this data outside the European Union: such transfers are governed by the EU–US Data Privacy Framework, to which Microsoft adheres, and by standard contractual clauses.

Your rights

You have the following rights over your data:

  • Access: get confirmation that we process your data, and a copy of it.
  • Rectification: have inaccurate or incomplete data corrected.
  • Erasure: have your data deleted, in the cases provided for by the GDPR.
  • Restriction: have processing frozen while something is checked.
  • Objection: object to processing based on our legitimate interest.
  • Portability: receive the data you gave us, in a machine-readable format.
  • Post-mortem instructions: decide what happens to your data after your death.

To exercise them, write to contact@graal.systems. We answer within one month, which may be extended by two months if the request is complex; we will let you know if so.

Complaints

If you believe your rights are not respected, you can lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or on cnil.fr.

Last updated: 29 September 2026.