Privacy Policy

Last updated: July 26, 2026

Data Controller

TokenShift, based in Paris, France, is the data controller for personal data collected through this website. Contact: contact@tokenshift.ai

Data We Collect

When you use our contact form, we collect your name, email address, company name, sector, and the content of your message. This data is collected solely to respond to your inquiry and evaluate potential engagements.

We measure our audience with Umami, a self-hosted analytics tool that sets no cookies, stores no IP address and identifies no one. It runs on our own server in France, its data is never shared, and it is deleted after 13 months. Because it cannot identify you, it runs without asking for your consent.

We also use HubSpot to follow up on contact requests. HubSpot does set cookies (__hstc, __hssc, __hssrc, hubspotutk) and therefore only loads if you accept it in the banner shown on your first visit. Refusing costs you nothing: the site works identically, and any HubSpot cookie already set is deleted.

Legal Basis for Processing

We process your personal data based on your consent (Article 6(1)(a) GDPR) when you submit the contact form, and on our legitimate interest (Article 6(1)(f) GDPR) to respond to business inquiries.

Expert Network expressions of interest

TokenShift, a brand of ACS, is the controller for the information you submit here. It is used for one purpose only: reviewing expressions of interest in the independent expert network. The legal basis is your consent, which you may withdraw at any time without affecting what was done before. Only the TokenShift people responsible for that review can see your record. The information is kept in our customer relationship platform and delivered by our transactional email provider, both acting as processors; where a processor operates outside the European Economic Area, the transfer relies on the standard contractual clauses adopted by the European Commission. We keep an expression of interest for up to twenty-four months after our last exchange with you, then delete it. You can ask for access, correction, deletion, restriction or portability, or object to the processing, by writing to contact@tokenshift.ai, and we answer within the period set by European data protection law. No automated decision is made about you.

Data Retention

Contact form submissions are retained for the duration necessary to process your inquiry and for a maximum of 24 months. You may request deletion at any time.

Your Rights

Under GDPR, you have the right to access, rectify, delete, or restrict the processing of your personal data. You also have the right to data portability and to withdraw consent at any time. To exercise these rights, contact contact@tokenshift.ai.

Data Transfers

Your data is stored on servers located in the European Union. We do not transfer personal data outside the EU/EEA.

Supervisory Authority

If you believe your data protection rights have been violated, you may file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertes) at www.cnil.fr.