This page says what Altores (“we”) does with personal data on this site: what is collected when you read it, what happens to what you send us, who sees it, where, for how long, and what you can ask of us. It is written from the site’s code, the settings of its tools and the way our contact channels actually work, and it changes before what it describes changes.
1.Who we are, and what this page covers
The controller of the data described here is Altores, a company registered with the Monaco Trade and Industry Register (RCI) under number 25S10085, with its registered office at 4/6 Avenue Albert II, Zone F, MonacoTech, 98000 Monaco. Altores builds AI agents, the platforms they run on, and IAaaS, its sovereign AI foundation.
This processing is governed by Monaco Law No. 1.565 of 3 December 2024 on the protection of personal data and, for people located in the European Union, by the General Data Protection Regulation (GDPR) where it applies.
This page covers the altores.mc website and what you send us through it. Our platforms (Support Portal, Horizon, Conformia and IAaaS) are used under a contract with the organisation that deploys them; section 7 explains what that changes about who is responsible.
2.When you read this site
Nothing that identifies you by name. This site has no accounts, no sign-in and no advertising, and loads no third-party script on its own; its pages are static files, served from Monaco by a web server configured without an access log. Audience measurement starts only if you accept it on the banner, with PostHog (hosted in the EU) and Google Analytics.
It then records the pages viewed, the path from one page to the next and the time spent, clicks, the page you came from, your browser, operating system, device type and language, and your approximate city and country, derived from your IP address. All of it is attached to a random identifier, tied to no name and no email address. What you type into a field is never recorded, and session recording is switched off. PostHog uses your IP address for this location, then does not keep it. Google Analytics does not keep your IP address.
Refuse, and nothing is measured. If your browser sends a Global Privacy Control or Do Not Track signal, it counts as a refusal: the banner does not appear and nothing is measured. Your choice is kept for six months in your browser, then you are asked again; until then, the “Manage cookies” link at the foot of every page reopens the banner so you can change your mind.
One exception, on the private documents and demonstrations we send to a client or a prospect (addresses under /p/, which open with a code): once the code is entered, PostHog counts the opening, what is viewed and, for a demonstration, whether the assistant was opened. Nothing is written on your device, no cookie and no local storage, which is why no banner asks; a Do Not Track signal is respected. The IP address is used for an approximate location, then not kept.
Without your agreement, this site sets no cookies. It keeps a few conveniences in your browser’s local storage and never transmits them. If you accept audience measurement, its tools set their own cookies and use this storage too. Each item is named, with its purpose and its lifetime, in the cookie policy.
3.When you write to us
There are four ways to reach us, and here is what each one does with what you send:
- The widget on private demonstrations. On the demonstration pages we send to a client or a prospect, which open with a code, the conversation widget also runs on Support Portal, our own platform, hosted by Altores, and answers on behalf of the demonstration. What you write there is received by Altores, which operates the demonstration; the conversation may be handled by our AI agents, which run on IAaaS, our own AI foundation. A cookie lets the widget find your conversation again if you come back; the cookie policy describes it.
- An email to general@altores.app. Your message, your address and your attachments arrive in our mailbox, hosted by Google (Google Workspace), and stay there for the exchange and the follow-up it calls for.
- The request field on the home page. What you type there is used in your browser to point you to the right page. Today it is not transmitted to us: it stays in your tab, and disappears when you close it. When a delivery channel is connected, this page will say so first.
- The cost calculator. Its figures are computed in your browser. If you ask for a quote, they follow you to the contact page in your tab’s storage, never in the page address, and nothing reaches us until you write to us.
4.Why, and on what basis
Each processing has its purpose and its legal basis, and nothing is used for anything else:
- Answering you and following up on your request: a step taken at your request before any contract, and our legitimate interest in answering those who write to us.
- Keeping the thread of an ongoing exchange, in our CRM, so that you do not have to repeat yourself: our legitimate interest.
- Measuring the site’s audience, to know which pages are useful and which to improve: your consent, which you can withdraw at any time.
- Knowing whether a document or demonstration we sent was opened, and what was read: our legitimate interest in following up on what we addressed to a specific person, without writing anything on their device.
- Meeting a legal obligation, when the law requires us to keep or disclose information.
We do not sell or rent any data, we run no targeted advertising, we send no newsletter today, and no decision producing legal effects concerning you is made by automated means. If a newsletter ever exists, subscribing will be a choice you make, never a box ticked for you.
5.Who has access
What you send us, and what audience measurement records if you accept it, is accessible only to:
- The Altores team, who read requests, answer them and look at the site’s traffic statistics.
- Our own platforms, Support Portal, IAaaS and our CRM, operated by Altores, and the hosting providers whose servers run them, acting only on our instructions.
- Monaco Telecom, which hosts this site’s server in Monaco.
- Google, which hosts our mailbox (Google Workspace), for what you send to general@altores.app.
- The audience measurement tools, after your agreement on the banner: PostHog (PostHog Inc., data hosted in the European Union) and Google Analytics (Google Ireland Limited, with Google LLC in the United States as a further processor). They act as processors, on our instructions, and none of them receives what you write to us.
- Cloudflare, for old altores.app links: it redirects them to this site, and processes the IP address and the requested address to do so.
- Authorities, only when the law, a court order or a public authority requires it.
No advertising partner, no data broker, and the measurement tools receive nothing without your agreement. The current list of our processors is sent to you on request, at the address in section 13. One exception: the cookieless measurement of private pages described in section 2.
6.Where, and for how long
This site is hosted in Monaco. Altores favours providers established in Monaco or in the European Economic Area; where one of them may process data elsewhere, such as Google for our mailbox or Cloudflare, the transfer rests on the safeguards the applicable law provides, such as standard contractual clauses, which we share on request. If you accept audience measurement, data sent to PostHog stays on its servers in the European Union, in Frankfurt. Data sent to Google Analytics may be transferred to the United States, under the EU-US Data Privacy Framework and the standard contractual clauses Google provides.
How long each thing is kept:
- A contact request, applications included: for the exchange and the follow-up it calls for, and at most three years after our last exchange, unless a contract follows, in which case the contract and the obligations attached to it set the period. After that, the data is deleted or made anonymous.
- In PostHog, measurement events: one year, the period our plan sets.
- In Google Analytics, data tied to an identifier: fourteen months after your last visit; beyond that, reports keep only totals.
- In your browser, measurement cookies: thirteen months at most; your choice on the banner: six months. The rest is in the cookie policy, item by item.
7.Our platforms
When you use one of our platforms as a member of an organisation that deploys it (a support team on Support Portal, an association on Horizon), that organisation decides why and how your data is processed and remains the controller; Altores processes the data on its behalf and on its instructions, as a processor, under the contract signed with it. Its own privacy notice applies to you, and your requests go to it first; we help it answer them.
What we can say for all our platforms: they are hosted where the customer decides, in Monaco with us, on their own infrastructure or in a closed environment; the AI models we operate can run on IAaaS, our sovereign foundation, inside that perimeter; and every platform keeps a record of who did what, which is part of what a customer buys.
8.Your rights
Depending on where you live and on the applicable law, you can ask us the following about your personal data:
- Access: to know what we hold about you and to receive a copy.
- Rectification: to have inaccurate or incomplete data corrected.
- Erasure: to have your data deleted, where the law allows it.
- Restriction: to have the processing limited in certain circumstances.
- Portability: to receive the data you gave us in a structured, machine-readable format, where the law provides it.
- Objection: to object to a processing based on our legitimate interest, at any time for anything resembling prospecting.
- Withdrawal of consent: where a processing rests on your consent, to withdraw it at any time, without affecting what was done before.
To exercise any of them, write to us at the address in section Contact. We answer within the time the law sets, and we may ask you to confirm your identity when the request concerns data we could not otherwise attribute to you.
If you believe we are not respecting your rights, you can refer the matter to the Monaco personal data protection authority (Autorité de protection des données personnelles, APDP), 11 rue du Gabian, immeuble « Le Concorde », 98000 Monaco, apdp.mc, or, if you live in the European Union, to the data protection authority of your country.
9.Security
This site is served over HTTPS, with security headers, and loads no third-party script on its own: the only ones, for audience measurement, wait for your agreement. Our platforms keep conversations and contacts behind access controls, on servers we operate or that are operated on our instructions, and keep a log of the actions that matter. No transmission over the internet is free of all risk; what we can promise is to add none of our own.
10.Children
This site and our services are addressed to organisations and to the people who work in them, not to children. We do not knowingly collect data about anyone under sixteen. If you believe a child has sent us data, write to us and we will delete it.
11.Links to other sites
This site links to other sites, such as our LinkedIn page, our clients’ sites and press articles. Their privacy practices are theirs; this page does not cover them, and we invite you to read theirs.
12.Changes to this page
This page changes when what we do with your data changes, and before it changes; the date at the top is that of the last change. A previous version is sent to you on request.
13.Contact
For any question about this page, or to exercise your rights, write to us:
The cookie policy complements this page: it lists, item by item, what the site stores in your browser.