Privacy Policy

1. Who is responsible

Lumens (EURL, SIRET 990 906 950 00011), which publishes OpenChemFacts, is responsible for the personal data described here. Contact for any question or request: alban@openchemfacts.com. Details on the publisher are on the Legal Information page.

2. What we collect, why, and on what basis

• Contact and demo requests (name, e-mail, organisation, message): to answer you. Basis: your request, and our legitimate interest in following up on it.
• Newsletter (e-mail): to send you news about OpenChemFacts. Basis: your consent. You can unsubscribe at any time from any message.
• Audience measurement on the marketing site (pages visited, how you reached the site, linked to your contact record if you later fill in a form): to understand what interests visitors. Basis: your consent, through the cookie banner.
• Sign-in to the data application (e-mail, organisation, technical session data): to give access to reserved features, which are granted by invitation. Basis: providing the service you asked for. Signing in is not needed to browse.
• Anonymous usage statistics (pages viewed, searches, substances viewed, performance, and whether you are signed in, without any identifier): to improve the platform. Basis: our legitimate interest. No cookies are used and visitors are not identified.

Giving us your details is always optional; without them we simply cannot answer, subscribe or sign you in.

3. Who processes the data for us

These providers act on our behalf. We do not sell personal data or use it for advertising.

• Vercel: website hosting and anonymous audience statistics (it sees technical data such as your IP address to deliver and secure the site).
• Cloudflare: delivery of the data and reports, storage in Western Europe.
• Supabase: accounts and sessions, hosted in the European Union (Paris); and Resend: the one-time sign-in code sent by e-mail, from the European Union. There is no password.
• HubSpot: forms, newsletter and contact records for the marketing site. It receives only what you submit, plus audience data if you accept the cookies.

Some of these providers are based in the United States, so data may be accessed from outside the European Union. This is covered by the safeguards they provide, such as the EU–US Data Privacy Framework or standard contractual clauses.

4. Cookies

• Strictly necessary, stored in your browser without asking: your sign-in session on the data application, and your cookie choice. There are no advertising cookies.
• Optional, on the marketing site only: the HubSpot audience cookies (hubspotutk, __hstc, __hssc, kept up to six months). They are loaded only if you accept in the cookie banner, never on the data application.

Your choice is kept for six months. You can change it at any time with “Cookie settings” in the footer.

5. How long we keep it

• Contact and demo requests: up to 3 years after our last exchange.
• Newsletter: until you unsubscribe.
• Accounts: while your access is active; deleted on request.
• Audience cookies: up to six months. Usage statistics are anonymous.

Data may be kept longer only where the law requires it.

6. Your rights

You can ask to access, correct or delete your data, to object to or restrict its use, to receive it in a portable format, and to withdraw a consent at any time. Write to alban@openchemfacts.com; we reply within one month.

If you think your rights are not respected, you can complain to the French data protection authority, the CNIL.

7. Changes

We may update this policy; the current version is always on this page. It is governed by French law.