Privacy policy

1. Who we are

Quetzal (“we”) operates quetzalplatform.com. The data controller is [Quetzal legal entity, to be completed], registered at [registered address]. For any privacy matter, write to contact@quetzalplatform.com.

2. What we collect, and why

Contact and application forms: name, work email, organization, sector, and the content of your message. Legal basis: your explicit consent (GDPR art. 6(1)(a)), collected through an unticked checkbox at the point of submission. We use this data solely to evaluate and respond to your enquiry or application.

Optional updates: if you separately opt in, we use your email to send occasional product and research updates. This consent is independent of the application and its refusal has no effect on how your application is treated.

Analytics: only after explicit opt-in via the cookie banner. Until you opt in, no analytics script is loaded and no measurement identifier is set. See the cookie policy for details.

3. What we do not do

We do not sell personal data. We do not share application data with third parties. We do not use form submissions to train models. We do not transfer personal data outside the EU/EEA except where an adequacy decision or appropriate safeguards under GDPR chapter V apply, and we will name the mechanism if asked.

4. Retention

Application and contact data: retained for up to 24 months after the last exchange, then deleted, unless a contractual relationship begins. Update-list consent: until withdrawn. Consent records: as long as required to demonstrate compliance.

5. Your rights

Under GDPR you can request access, rectification, erasure, restriction, portability, and object to processing; where processing rests on consent you can withdraw it at any time with effect for the future. Write to contact@quetzalplatform.com and we will respond within 30 days. You also have the right to lodge a complaint with your supervisory authority (in France, the CNIL).

6. Security

Form data is transmitted over TLS and stored with access restricted to the founding team. Given our design-partner work with government and industrial data, our internal handling standard for personal data follows the same posture: least access, named accountability, and logged handling.

7. Changes

We will post any material change to this policy on this page with a new effective date. Effective date: 1 July 2026.