Legal information

Privacy policy.

Last updated: July 2026.

Article 1. Data controller

The data controller is Imagine All The People, a French simplified joint-stock company (société par actions simplifiée) with a capital of €2,000, registered with the Rodez Trade and Companies Register under number 990 233 728, whose registered office is at 1 Rue de la Planquette, 12230 Saint-Jean-du-Bruel, France. For any question about your personal data, you can write to us at sales@allthepeople.io.

Article 2. A design principle: no personal data in the synthetic populations

The synthetic populations produced by our system contain no personal records. They are built from anonymous statistical aggregates and segments. When an Enterprise client provides proprietary data for calibration, it is integrated after strict anonymization. This policy therefore only concerns the personal data you provide to us as a user or prospect: it does not concern the synthetic individuals, who do not exist.

Article 3. Data collected

We collect the following data. Account data: last name, first name, professional email address, organization, role, provided when you create your account or start the free trial. Billing data: billing details and payment information, processed by our payment provider. Contact data: the information you send us through the contact form, by email or by WhatsApp. Usage data: interaction consumption, technical logs of connection and platform use. Entries made in the platform: the decisions, questions and scenarios you submit remain confidential and are accessible only to your account.

Article 4. Purposes and legal bases

Your data is processed for the following purposes: providing the service and managing your account (performance of the contract); invoicing and collection (performance of the contract and legal obligations); technical and commercial support (performance of the contract); responding to your contact requests (legitimate interest or pre-contractual measures); improving the service and securing the platform (legitimate interest); complying with our legal and accounting obligations (legal obligation). We do not sell your data and do not use it for advertising purposes.

Article 5. Recipients and hosting

Your data is accessible only to the authorized teams of Imagine All The People, and to the technical providers strictly necessary to the service (hosting, payment, email delivery), acting on instruction and under GDPR-compliant agreements. Platform data is hosted in France, on the infrastructure designated in the legal notice. If you choose to contact us via WhatsApp, that exchange is operated by WhatsApp (Meta) under its own terms and privacy policy, which may involve transfers outside the European Union.

Article 6. Retention periods

Account data is kept for the duration of the contractual relationship, then archived for the applicable statutory limitation periods. Billing data is kept for ten years in accordance with accounting obligations. Data of prospects without a contractual relationship is kept for three years after the last contact. Technical logs are kept for twelve months.

Article 7. Your rights

In accordance with the GDPR, you have the right of access, rectification, erasure, restriction, objection and portability over your personal data. You can exercise these rights by writing to sales@allthepeople.io. We respond within one month. You also have the right to lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

Article 8. Security

We implement technical and organizational measures suited to the sensitivity of the data processed: encryption of exchanges, access control, logging, sovereign hosting. Detailed security commitments are presented in the Security section of the site.

Article 9. Changes to this policy

This policy may be updated to reflect the evolution of the service or of regulation. The date of the last update appears at the top of the page. In the event of a substantial change, users with an account are informed.