Privacy Policy

ImmersiNext (“we,” “our,” or “us”) respects your privacy and is committed to protecting it through this Privacy Policy. This policy explains how we collect, use, store, and safeguard your personal data when you use our website immersinext.io and any related subdomains (collectively, the “Platform”), including embedded configurators on partner websites.

By accessing or using the Platform, you acknowledge this Privacy Policy. If you do not agree, you must not use the Platform. We may update this Privacy Policy from time to time, and the most recent version will always be available on this page.

1. Data Controller

ImmersiNext, located at 14 Avenue de Friedland, 75008 Paris, France, is the data controller responsible for the processing of your personal data under the EU General Data Protection Regulation (GDPR) for the ImmersiNext website, accounts, and billing.

When a merchant embeds our configurator on their website, ImmersiNext typically acts as a processor (or joint controller for limited platform security purposes) for anonymous configurator audience metrics collected on that merchant’s behalf. The merchant remains responsible for informing their own visitors as required by applicable law.

For any questions or to exercise your rights, contact us at: [email protected]

2. Scope of This Policy

This Privacy Policy applies to data we collect:

• Through our website immersinext.io and its subdomains.
• Through email or other electronic communications between you and ImmersiNext.
• Through our web-based applications, dashboard, and related services.
• Through configurators embedded on partner websites (audience measurement and lead forms).

3. Eligibility and Minors

Our Platform is intended for individuals aged 18 and older. We do not knowingly collect personal data from anyone under 18. If we discover that we have inadvertently collected personal information from a minor, we will delete it promptly.

4. What Personal Data We Collect

• Identification Data: First name, last name, email address, company name, phone number.
• Account Data: Encrypted password, profile details, email preferences.
• Billing Data: Billing address, VAT details, and payment method references processed via Stripe (we do not store full card numbers).
• Technical Data: Browser type, device type, usage logs; IP addresses may be processed briefly for security, geo-location, and rate limiting but are not stored in configurator session analytics.
• Uploaded Content: Files such as 3D models, images, plans, and AI Studio inputs/outputs.
• Configurator audience metrics: a random persistent visitor identifier (`anon_id`), country/city/state derived at session time, device type, session duration, page URL / site origin — used to measure usage and revisits without identifying who you are.
• Lead / enquire form data submitted from a configurator (name, email, phone, country, configuration).
• Website analytics (immersinext.io only, with consent): Google Tag Manager, Google Analytics, and optionally Hotjar or Microsoft Clarity.

5. How We Collect Data

• Directly from you when you register, create projects, upload files, request support, or contact us.
• Automatically when you browse immersinext.io (essential cookies; analytics cookies only after consent).
• Automatically when you use an embedded configurator (first-party visitor id and session metrics; no marketing cookie banner inside the iframe).
• From third parties (e.g., Stripe, email providers) when necessary for service delivery.

6. Why We Collect and Process Data

• Account creation and login (contractual necessity).
• Service delivery and project management (contractual necessity).
• Billing and payment processing (legal obligation and contractual necessity).
• Configurator audience measurement for merchants (legitimate interest / performance of the service).
• Fraud prevention and platform security (legitimate interest).
• Marketing communications (consent-based, optional).
• Website analytics on immersinext.io (consent-based).

7. Legal Bases for Processing

• Consent (e.g., marketing emails, optional website analytics cookies).
• Contractual necessity (providing services you signed up for).
• Legal obligation (tax and billing compliance).
• Legitimate interest (improving platform, ensuring security, preventing abuse, configurator audience stats for merchants).

8. Cookies and Tracking Technologies

On immersinext.io we use a first-party consent banner. Essential cookies (e.g. authentication) run without consent. Analytics and marketing tags (GTM, Google Analytics, Hotjar, Clarity when configured) load only after you accept the relevant categories. You can change preferences anytime via “Manage cookie preferences” in the footer.

In embedded configurators (iframes on partner sites) we do not load GTM/GA/Hotjar/Clarity and we do not show a cookie banner inside the iframe. We may store a random first-party visitor id (localStorage / cookie, max ~13 months) solely for audience measurement and revisits. See our Cookies Policy for details.

9. Data Sharing with Third Parties

We only share personal data with trusted service providers as necessary to operate our Platform:

• Infrastructure & Hosting: Vercel, Railway, AWS S3 / Cloudflare R2, Cloudflare CDN.
• Email: Brevo (transactional; marketing only if you opted in).
• Analytics (website, with consent): Google Tag Manager, Google Analytics; optionally Hotjar, Microsoft Clarity.
• Payments: Stripe.
• Security: Google reCAPTCHA.
• AI features (when you use AI Studio): OpenAI and/or Google Gemini.
• Domain & DNS: Gandi.

Merchants with ImmersiNext projects can access configurator session analytics for their own projects (geo, device, duration, anonymous visitor id) — not raw IP addresses for new sessions.

10. International Data Transfers

Some providers (e.g., Vercel, Railway, Google, Stripe, OpenAI) may process data outside the European Economic Area, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) and contractual protections with those providers.

11. Data Retention

• Account and billing data: retained while your account is active and as required by law (e.g. tax records).
• Configurator session / queue analytics: retained up to 13 months, then deleted.
• Leads and project content: retained while the project exists or until deletion is requested by the project owner / data subject.
• Cookie consent preferences: stored locally in your browser until cleared or updated.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted transmission (HTTPS/TLS), hashed passwords, access controls, and restricted access to uploaded files. No method of transmission or storage is 100% secure.

13. Your Rights (GDPR)

You have the following rights regarding your personal data:

• Access – Request a copy of your data.
• Rectification – Correct inaccurate or incomplete data.
• Erasure – Request deletion of your data (“right to be forgotten”).
• Portability – Receive your data in a structured, machine-readable format.
• Objection – Object to processing based on legitimate interests.
• Withdraw Consent – Withdraw consent at any time (e.g., unsubscribe from marketing, cookie preferences).

To exercise your rights, contact us at [email protected]. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés).

14. California / US Privacy (CCPA)

If you are a California resident, you may have rights to know, delete, and correct personal information we hold about you, and to opt out of “sale” or “sharing” of personal information as defined by California law. ImmersiNext does not sell personal information. To submit a request, email [email protected]. We will not discriminate against you for exercising these rights.

15. Children’s Privacy

We do not knowingly collect personal data from individuals under 18. If we become aware that we have inadvertently collected such data, we will promptly delete it.

16. Changes to This Privacy Policy

We may update this Privacy Policy at any time. Any changes will be posted on this page with a revised “Last Updated” date. Continued use of the Platform after such changes constitutes acceptance of the updated policy where permitted by law.

17. Contact Us

For questions about this Privacy Policy or our data practices:

ImmersiNext
14 Avenue de Friedland, 75008 Paris, France
Email: [email protected]