Privacy
Privacy policy
Version V1 · 2026-04-27
Data controller
MLADAOS, a French simplified joint-stock company registered with the Paris Trade and Companies Register under number 107 858 847, 47 rue Vivienne, 75002 Paris — operating the 3AP trademark. Contact: [email protected].
Purposes of processing
Your data is processed to: (1) generate a personalized finance maturity report from diagnostic answers, (2) send this report by email, (3) enable a commercial conversation with our team if you wish, (4) improve our diagnostic methodology (anonymized statistical analysis).
Legal basis
Explicit consent (GDPR Art. 6(1)(a)), collected before any processing through the consent screen of the diagnostic or the contact form.
Data collected
Identity (first name, last name), company (corporate name, sector, revenue range, headcount), work email, diagnostic answers, optional free-form message. IP address pseudonymized (sha256 + salt) for rate limiting. No sensitive data within the meaning of GDPR Art. 9 is requested.
Recipients
3AP team only (Nicolas Makowski and partners). The diagnostic report is generated through an anonymized API call to Anthropic (United States) — the payload transmitted contains neither your name, nor your email, nor your company name (only an anonymized identifier + your scored answers + revenue range / headcount / sector). No transmission to commercial partners or third parties for marketing purposes.
Retention period
Your data is retained for 12 months after your last contact with 3AP. If you become a customer, the duration extends to the contract term plus applicable legal obligations (5 years for billing, 10 years for accounting records).
Your rights
Pursuant to GDPR Articles 15 to 22, you have rights of access, rectification, deletion, portability, restriction, and objection. You may also withdraw your consent at any time — withdrawal is as simple as granting it: write to [email protected] mentioning your email, and we proceed with deletion within 30 days. You may file a complaint with the CNIL (www.cnil.fr).
Hosting
All your data is hosted in the European Union (Hetzner Cloud servers, Germany / Finland). No raw data is stored outside the EU.
Cookies and local storage
The interactive diagnostic uses your browser's local storage (localStorage) to save your answers in progress, only after you have given consent. This data is automatically purged after 24 hours of inactivity or if you withdraw consent. No third-party advertising cookies are dropped.
Contact
For any question on this policy or to exercise your rights: [email protected].
This policy is an initial version (V1) intended to cover essential GDPR obligations during the launch phase. An enriched version reviewed by our legal counsel will be published shortly (internal ticket GTM-03L).