Challenge Tech ("we", "our", "Accorma") is committed to protecting the privacy of the users of its services. This privacy policy describes how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.
1. Data Controller
The data controller for your personal data is:
Challenge Tech
WTC, 2 rue Henri Barbusse, 13001 Marseille, France
Email :
2. Personal Data Collected
2.1 Data you provide to us
- Identification data : first name, last name, email address, password (hashed), organization name
- Billing data : billing address (via our payment provider Stripe)
- Generated content : URLs of audited sites, audit results, conversations with the AI assistant
2.2 Automatically collected data
- Technical data : IP address, browser type, operating system, pages visited
- Usage data : actions in the application, frequency of use, preferences
- Activity logs : logins, audits launched, project modifications
2.3 Chrome Extension Data
The Accorma Chrome extension only collects data necessary for the accessibility analysis of the active page. This data is processed locally or sent to our servers for analysis, depending on your preferences. No data is collected on pages that are not analyzed.
3. Purposes and Legal Bases
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Contract execution |
| Provision of audit services | Contract execution |
| Billing and payment | Contract execution / Legal obligation |
| Customer support | Contract execution / Legitimate interest |
| Service improvement | Legitimate interest |
| Marketing communications | Consent |
| Security and fraud prevention | Legitimate interest / Legal obligation |
| AI training | Legitimate interest (aggregated and anonymized data only) |
4. Data Retention Periods
| Data Type | Retention Period |
|---|---|
| Account data | Duration of contract + 3 years |
| Audit results | 2 years after last project audit |
| AI conversations | 1 year |
| Billing data | 10 years (legal accounting requirement) |
| Connection logs | 1 year |
| Technical cache | 7 days |
| Analytics cookies | 13 months |
5. Data Recipients
Your data may be shared with:
- Our internal teams : support, technical, billing (limited access as needed)
- Technical subcontractors :
- Anthropic : AI analysis (Claude) — data processed according to their privacy policy
- Stripe : payments — card data not stored by Accorma
- Cloud hosting provider (European Union) : infrastructure hosting
- Legal authorities : if required by law or a court decision
6. Transfers Outside the EU
Some of our subcontractors (notably Anthropic for AI) are located in the United States. These transfers are governed by:
- Standard Contractual Clauses of the European Commission
- The EU-US Data Privacy Framework (if applicable)
Your primary data (account, audits) is hosted in the European Union.
7. Your Rights
Under the GDPR, you have the following rights:
- Right of access : obtain a copy of your personal data
- Right to rectification : correct inaccurate or incomplete data
- Right to erasure : request the deletion of your data
- Right to portability : receive your data in a structured format
- Right to object : object to processing for a legitimate reason
- Right to restriction : limit the processing of your data
- Withdrawal of consent : withdraw your consent at any time
How to exercise your rights
You can exercise your rights in several ways:
- By email :
- From your customer area (Settings > Personal data)
- By mail : Challenge Tech - DPO, WTC, 2 rue Henri Barbusse, 13001 Marseille, France
We will respond to your request within one month. This period can be extended by two months in case of a complex request.
Complaint to the Supervisory Authority
If you believe that the processing of your data does not comply with regulations, you can file a complaint with the CNIL:
CNIL
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07
www.cnil.fr
8. Cookies and Trackers
Our site uses cookies for the following purposes:
Strictly Necessary Cookies
These cookies are essential for the operation of the site and cannot be disabled.
session: session managementtheme: theme preference (light/dark)locale: language preference
Analytics Cookies (optional)
These cookies help us understand how you use our site. They are only set with your consent.
_ga, _gid: Google Analytics (if enabled)
Managing Your Preferences
You can manage your cookie preferences at any time via the consent banner or from your browser settings.
Data security
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit (HTTPS/TLS)
- Password hashing (bcrypt)
- Two-factor authentication available
- Account access restriction according to the principle of least privilege
- Access monitoring and logging
- Regular backups
Policy changes
We may update this privacy policy. In case of a substantial change, we will notify you by email or via a notification in the application. The date of the last update is indicated at the top of this page.
Contact
For any questions regarding this policy or your personal data:
Data Protection Officer (DPO)
Challenge Tech
Email :