Privacy Policy

Last updated: July 5, 2026

Challenge Tech ("we", "our", "Accorma") is committed to protecting the privacy of the users of its services. This privacy policy describes how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Data Controller

The data controller for your personal data is:

Challenge Tech
WTC, 2 rue Henri Barbusse, 13001 Marseille, France
Email : contact@accorma.com

2. Personal Data Collected

2.1 Data you provide to us

• Identification data : first name, last name, email address, password (hashed), organization name
• Billing data : billing address (via our payment provider Stripe)
• Generated content : URLs of audited sites, audit results, conversations with the AI assistant

2.2 Automatically collected data

• Technical data : IP address, browser type, operating system, pages visited
• Usage data : actions in the application, frequency of use, preferences
• Activity logs : logins, audits launched, project modifications

2.3 Chrome Extension Data

The Accorma Chrome extension only collects data necessary for the accessibility analysis of the active page. This data is processed locally or sent to our servers for analysis, depending on your preferences. No data is collected on pages that are not analyzed.

3. Purposes and Legal Bases

4. Data Retention Periods

5. Data Recipients

Your data may be shared with:

• Our internal teams : support, technical, billing (limited access as needed)
• Technical subcontractors :
  • Anthropic : AI analysis (Claude) — data processed according to their privacy policy
  • Stripe : payments — card data not stored by Accorma
  • Cloud hosting provider (European Union) : infrastructure hosting
• Legal authorities : if required by law or a court decision

6. Transfers Outside the EU

Some of our subcontractors (notably Anthropic for AI) are located in the United States. These transfers are governed by:

• Standard Contractual Clauses of the European Commission
• The EU-US Data Privacy Framework (if applicable)

Your primary data (account, audits) is hosted in the European Union.

7. Your Rights

Under the GDPR, you have the following rights:

• Right of access : obtain a copy of your personal data
• Right to rectification : correct inaccurate or incomplete data
• Right to erasure : request the deletion of your data
• Right to portability : receive your data in a structured format
• Right to object : object to processing for a legitimate reason
• Right to restriction : limit the processing of your data
• Withdrawal of consent : withdraw your consent at any time

How to exercise your rights

You can exercise your rights in several ways:

• By email : contact@accorma.com
• From your customer area (Settings > Personal data)
• By mail : Challenge Tech - DPO, WTC, 2 rue Henri Barbusse, 13001 Marseille, France

We will respond to your request within one month. This period can be extended by two months in case of a complex request.

Complaint to the Supervisory Authority

If you believe that the processing of your data does not comply with regulations, you can file a complaint with the CNIL:

CNIL
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07
www.cnil.fr

8. Cookies and Trackers

Our site uses cookies for the following purposes:

Strictly Necessary Cookies

These cookies are essential for the operation of the site and cannot be disabled.

• session : session management
• theme : theme preference (light/dark)
• locale : language preference

Analytics Cookies (optional)

These cookies help us understand how you use our site. They are only set with your consent.

• _ga, _gid : Google Analytics (if enabled)

Managing Your Preferences

You can manage your cookie preferences at any time via the consent banner or from your browser settings.

Data security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (HTTPS/TLS)
• Password hashing (bcrypt)
• Two-factor authentication available
• Account access restriction according to the principle of least privilege
• Access monitoring and logging
• Regular backups

Policy changes

We may update this privacy policy. In case of a substantial change, we will notify you by email or via a notification in the application. The date of the last update is indicated at the top of this page.

Contact

For any questions regarding this policy or your personal data:

Data Protection Officer (DPO)
Challenge Tech
Email : contact@accorma.com