Privacy Policy
This policy explains how Opsin collects and uses personal data through opsin.bio. It applies to visitors to this website. It does not cover data processed within the Octopus application, which is governed by the agreement signed with each customer.
Who is Responsible
Opsin, SAS, 3 RUE JOLIOT-CURIE, 91190 GIF-SUR-YVETTE, France, RCS EVRY 108637158, acts as data controller for the processing described below.
For any question or request relating to your personal data, contact legal@opsin.bio.
What we collect and why
Contact and demo requests. When you submit a form on this site, we collect the information you provide — typically your name, professional email address, company, role and the content of your message. Purpose: responding to your enquiry and, where relevant, discussing a possible commercial relationship. Legal basis: our legitimate interest in responding to enquiries and developing our business (GDPR art. 6(1)(f)), and pre-contractual steps taken at your request (art. 6(1)(b)).
Email correspondence. If you write to us directly, we process the content of that correspondence for the same purposes and on the same bases.
Audience measurement. We do not use any third-party analytics, advertising or tracking service on this website. We have access only to the aggregate, anonymous traffic statistics provided by our hosting platform, which do not identify individual visitors.
Technical logs. Our hosting provider records connection data, including IP addresses, as needed to deliver and secure the site. Legal basis: legitimate interest in the security and availability of the site.
We do not sell personal data, and we do not use it for automated decision-making or profiling.
Who has access
Personal data is accessible to Opsin staff who need it, and to the service providers acting on our behalf:
Framer B.V. (Rozengracht 207B, 1016 LZ Amsterdam, Netherlands) — website hosting and form handling. Framer uses Amazon Web Services as its own hosting infrastructure.
Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) — professional email and document storage through Google Workspace. Google LLC, its US affiliate, is certified under the EU–US Data Privacy Framework.
Attio (United Kingdom) — customer relationship management, used to record and follow up on commercial contacts.
We may also disclose data where required by law or to establish or defend legal claims.
Transfers outside the EU
Framer and Google Ireland are established within the European Economic Area. Attio is established in the United Kingdom, which benefits from a European Commission adequacy decision adopted on 19 December 2025, so no further transfer safeguards are required for that transfer.
Where any of these providers relies on infrastructure or support staff located in the United States, the transfer is covered by the European Commission's Standard Contractual Clauses and, where applicable, by the provider's certification under the EU–US Data Privacy Framework. You may request further detail on these safeguards at legal@opsin.bio.
How long we keep it
Contact and demo requests: 3 years from our last contact with you
Email correspondence: 3 years from the last exchange
Technical logs: 12 months
Aggregated audience statistics: 25 months
Data relating to a customer relationship is kept for the duration of the contract and for the applicable legal retention periods thereafter.
Your rights
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time where processing is based on consent. You may also give instructions on the fate of your data after your death.
To exercise these rights, write to [privacy@opsin.bio]. We may ask for proof of identity where there is reasonable doubt. We respond within one month.
If you believe your rights have not been respected, you may lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.
Cookies
This site does not use advertising, analytics or tracking cookies, and does not place cookies from third parties. Only strictly necessary technical storage is used to deliver the site correctly, which under article 82 of the French Data Protection Act does not require your consent. This is why you are not shown a cookie banner.
If we introduce non-essential cookies in future, we will ask for your consent beforehand and update this policy.
Changes
We may update this policy. The current version is always available at this address, with the date of the latest revision below.