Privacy Policy

1. Introduction

This privacy policy describes how EMILIOO SAS ("Emilioo", "we") collects and processes your personal data when you use the website labs66.com (the "Site"), a product developed by EMILIOO SAS.

Emilioo processes your data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable French legislation.

2. Data Controller

3. Data Collected

Depending on your use of the Site, we may collect the following categories of data:

3.1 Data you provide to us

When you contact us (early access, contact), we may collect: first name (if provided), email address, company name (if provided), message content and information you choose to share.

3.2 Technical data (limited collection)

During your browsing, certain technical data may be processed to ensure the operation and security of the Site: IP address, browser type and operating system, strictly necessary browsing information (requests, pages viewed).

3.3 Data obtained via Google Sign-In

When you choose to sign in with Google, we receive the following information from Google: email address and name associated with your Google account. This data is used solely to create and manage your Labs66 account. We do not access any other data from your Google account (contacts, files, calendar, etc.).

3.4 Data obtained from Meta services (Facebook / Instagram)

When you connect a Meta account (Facebook Login) or link Meta assets (Facebook Pages, ad accounts, Business Manager) to the Labs66 platform, we receive information from Meta interfaces only within the permissions you grant. Depending on your configuration, this may include: public profile identifier and name, list of Pages you administer, information about your Meta businesses, identifiers and metadata for advertising campaigns and ads, and engagement metrics where the corresponding permission has been accepted.

This data is used to provide the features you enable in Labs66: advertising performance management and analysis, AI-assisted reports and recommendations, and enrichment of context within your workspace. It is not sold to third parties and is not used for targeted advertising outside the service. Where applicable, certain data may be processed by our technical or AI providers strictly to operate the service and in line with our contractual commitments.

When you visit labs66.com, Meta trackers (for example the Meta Pixel and, where applicable, server-side Conversions API) may be used to measure the effectiveness of our marketing campaigns and site usage, under the conditions shown in our cookie banner when present and in accordance with applicable settings.

When you act on behalf of an organization (brand, agency, client company), you warrant that you have the necessary authorizations to connect the relevant Meta assets and, where required, that you inform the individuals concerned.

You can revoke Labs66's access to Meta at any time from your Facebook / Meta account settings for apps and websites and from the integrations available in Labs66. To request deletion of associated data stored by Labs66, email us at contact@labs66.com; we will handle your request within the timeframes set out under "Your Rights".

4. Purposes and Legal Bases

We process your data for the following purposes:

• Complying with our legal obligations (where applicable). Legal basis: legal obligation.
• Ensuring the operation and security of the Site (abuse prevention, diagnostics, protection). Legal basis: legitimate interest.
• Responding to your requests (contact, early access). Legal basis: pre-contractual measures and/or legitimate interest.
• Meta integrations and marketing measurement (Facebook login, advertising and Page data linked to your account when you enable the integration; measurement via Meta Pixel on the site). Legal basis: performance of a contract and/or legitimate interest; where applicable law requires it, consent for non-strictly necessary trackers.

5. Data Recipients

Your data is accessible only to authorized persons within Emilioo and our technical service providers acting as processors (hosting, messaging, security), only to the extent necessary to provide their services.

Meta products (Facebook / Instagram) also process data as a separate platform: when you enable a Meta connection or Meta trackers, information is transmitted to Meta in accordance with Meta's applicable terms and policies.

We do not sell your data.

6. Limited Use of Google Data

Labs66's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Labs66 will not use data obtained via Google Sign-In for:

• targeted, personalized, or retargeted advertising
• sale to data brokers or any other third parties
• creditworthiness assessment or financial scoring
• training artificial intelligence models or building databases
• any purpose unrelated to providing and improving the Labs66 service

7. Transfers Outside the European Union

Certain technical service providers may be located outside the European Union. In such cases, transfers are governed by appropriate safeguards in accordance with the GDPR (for example, standard contractual clauses).

8. Data Retention

• Security-related technical data: retained for a limited duration, proportionate to security needs.
• Prospects: maximum 3 years from the last active contact.
• Request-related data: retained for the time needed to process the request, then archived if necessary.
• Google authentication data: retained as long as your Labs66 account is active. Deleted within 30 days of account deletion.
• Meta integration data: retained while the Meta connection or integration is active in your Labs66 account, then deleted or anonymized within a reasonable period after you disconnect or remove the integration, unless a legal obligation requires longer retention.

9. Your Rights

In accordance with the GDPR, you have the following rights: access, rectification, erasure, objection, restriction, portability (in certain cases), withdrawal of consent (only when processing is based on consent).

You may request the deletion of your account and all associated data at any time. Your account and data will be deleted within 30 days of your request.

To exercise your rights: contact@labs66.com. You may also file a complaint with the CNIL.

10. Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration.

11. Cookies and Trackers

The Site uses elements that are strictly necessary for operation and security. Meta trackers (including the Meta Pixel and, where applicable, related server-side measurement) may be placed to assess the effectiveness of our marketing campaigns; where applicable law requires prior consent, it is collected through the mechanism displayed on the Site (cookie banner or equivalent).

Strictly technical elements may be used by the infrastructure to ensure the operation and security of the Site.

12. Updates

We may modify this privacy policy. The current version is the one published on this page, with the update date.