Privacy Policy
Last updated
1. Who processes your data
Pandorra AI LLC (Pandorra Studio brand), United States. For any question about your data: contact@pandorra.ai.
2. Data collected, uses and legal bases
- Name, company, email, message (form, email). Use: Answer your request, prepare a quote. Legal basis: Pre-contractual steps or legitimate interest.
- Billing data (company, address, VAT number). Use: Invoice and keep our accounts. Legal basis: Contract and legitimate interest (meeting our accounting and tax obligations).
- Business contact details from public sources (websites, directories) or business databases. Use: Present our services by email, where the law allows business-to-business direct marketing without prior consent; elsewhere, only with your consent. Legal basis: Legitimate interest or consent, depending on the country.
- Browsing data via the Meta Pixel, only if you accept. Use: Measure our ads and show them to you on Facebook and Instagram (targeting and retargeting). Legal basis: Consent.
3. Who receives your data
Your data is never sold. It is shared only with our providers, for the uses above (website hosting, email, email marketing), and with the subcontractors who help deliver our services, who are bound by confidentiality. If you accept cookies, Pixel data is also sent to Meta, which then uses it for its own purposes (see section 6).
If a page offers to ask an AI assistant (ChatGPT, Claude, Perplexity or Gemini) about Pandorra Studio, following one of its links opens the assistant you chose in a new tab; the question (pre-filled, or pasted by you after "Copy prompt") and your IP address go to that assistant, under its own privacy policy. Nothing about it is sent to or stored by this site.
4. Where your data is
Pandorra AI LLC is established in the United States: your data is processed there and in the countries of our providers, namely the United States and the European Union. Where the law requires, these transfers are covered by our providers' safeguards: certification under the Data Privacy Framework (EU–US or Swiss–US) or the European Commission's standard contractual clauses. You can obtain a copy of these safeguards by writing to contact@pandorra.ai.
5. How long we keep it
- Prospects and contacts: 3 years after you last contacted or replied to us.
- Clients: for the term of the contract, then up to 7 years for our accounting and tax obligations.
- Meta Pixel cookies: up to 90 days. Your cookie choice is kept for 6 months.
6. Cookies
The site only uses the cookies it needs to work, unless you click "Accept" in the banner. In that case, the Meta Pixel measures our ads and lets us show them to you on Facebook and Instagram (targeting and retargeting). For the collection and transmission of this data, we are joint controllers with Meta (Meta Platforms Ireland Ltd in Europe); the essence of our arrangement with Meta is available here: facebook.com/legal/controller_addendum (https://www.facebook.com/legal/controller_addendum). Meta alone is responsible for how it uses the data afterwards, under its own policy: facebook.com/privacy/policy (https://www.facebook.com/privacy/policy). You can change your choice at any time with the "Cookies" link at the bottom of the page.
7. Your rights
At any time, you can access your data, correct it, delete it, restrict its use, object to processing based on our legitimate interest and to direct marketing (a simple reply to our email is enough), and receive it in a common machine-readable format. You may withdraw your consent at any time where processing relies on your consent. Write to contact@pandorra.ai. You can also lodge a complaint with the data protection authority of your country.
8. Security
We protect your data with reasonable measures: encrypted connection (HTTPS), access limited to the people who need it, recognised tools.
9. Changes
We may update this policy. The date at the top of the page shows the latest version.