Privacy policy
Last updated: October 26, 2026 · Version 2026-10
This policy explains how Icosmind processes your personal data when you use icosmind.com, Synapse and our forms, and when you become a client. It applies Law No. 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data, as amended and supplemented by Law No. 25-11 of 24 July 2025.
1. Data controller
The data controller is Icosmind, the trade name of DERDAR Ryad, Dely Ibrahim, Algiers. Email: contact@icosmind.com.
- Formalities with the ANPDP: before putting them in place, Icosmind declares the processing described in this policy to the ANPDP, as Article 12 of the law requires, and asks for its authorisation where the law or the ANPDP requires it.
2. Data we collect
- When you book a call or write to us: name, company, job title, phone, email, wilaya, industry, information about your project, chosen time slot.
- When you request a dossier: name, email, company (optional), industry.
- When you talk to Synapse: the content of your written messages. In voice mode, your voice is converted to text as you speak, and only the transcript is kept, never the audio recording. Information you choose to share (name, phone, email) is attached to your enquiry.
- When you answer on an advertising page: your industry, the monthly budget you plan and when you want to start; if your budget does not match our packs, only your email, and only if you agree to hear about our simpler offer.
- Technical data: IP address (stored truncated or encrypted), device and browser type, pages viewed, referral source (link, advertising campaign), only within the limits of your cookie choices.
We do not knowingly collect sensitive data. Please do not share any with Synapse or in the forms.
3. Why we use it
- To answer your enquiry, organise and prepare the strategy call, and send you the dossier you requested.
- To follow up on your enquiry and, if you agreed, send you our news.
- To run Synapse and improve its answers and our content.
- To measure audience and the effectiveness of our campaigns, only with your consent.
- To measure our Google and Meta ads, if you accepted advertising cookies: we send them your email and phone in hashed form (a SHA-256 fingerprint, never in clear) and the stage of your enquiry (form sent, call booked, our follow-up after the call), so they can measure our ads and show them to similar businesses.
- To tell you about the launch of a simpler offer, if you asked; every email has an unsubscribe link.
- To secure the site and prevent abuse.
- To perform our contracts with clients and meet our accounting and tax obligations.
Under Article 7 of the law, each use rests on your express consent or on one of the cases where the law does not require it: steps you ask us to take before a contract, the performance of a contract, a legal obligation, or our legitimate interest in running and securing the site, with due regard for your rights. You can withdraw your consent at any time.
4. Automated decisions
No decision about you is taken solely by automated means. Synapse may suggest a next step or assign a priority to your enquiry, but our team reviews every enquiry.
5. Recipients and processors
Your data is processed by the Icosmind team and by technical providers that act only on our instructions, under a contract that binds them to keep the data confidential and secure (Article 39 of the law):
| Provider | Purpose | Data | Where it is processed |
|---|---|---|---|
| Supabase | Database and files | Enquiries, bookings, Synapse conversations, proof of consent | European Union (Ireland) |
| Vercel | Website hosting | Technical data, the content of forms as they are sent | European Union and United States |
| Fly.io | Synapse's voice server | Your voice while it is converted to text, never stored | European Union (Paris, France) |
| Resend | Sending emails | Name, email, the content of the email | United States |
| Cerebras | Generating Synapse's written and spoken answers | Your messages and transcripts | United States |
| Synapse's speech-to-text and text-to-speech, searching Synapse's knowledge base, and the booking calendar and video calls (Calendar, Meet) | Your messages, your voice in voice mode, booking details | Outside Algeria, depending on the Google service | |
| Upstash | Limiting the number of requests, against abuse | A fingerprint of your IP address, visitor ID or email, never the raw value | European Union |
| Sentry | Tracking technical errors | Technical data about the error | European Union or United States |
| Cloudflare Turnstile | Bot protection on the forms | Technical data about your browser | A network of servers in several countries, outside Algeria |
| Google (Analytics, Google Ads) | Audience and ad measurement, only with your consent | Pages viewed, referral source; for an enquiry: hashed email and phone (fingerprints), the enquiry's stage | Outside Algeria, notably in the United States |
| Meta (Facebook, Instagram) | Ad measurement, only with your consent to advertising | Pages viewed, referral source; for an enquiry: hashed email and phone (fingerprints), the enquiry's stage | Outside Algeria, notably in the United States |
| Analytics and advertising tools, only once you consent | See the cookie policy | Pages viewed, interactions, referral source | Outside Algeria, depending on the tool |
We keep this list up to date. Your data is never sold.
6. Transfers outside Algeria
Icosmind is established in Algeria, and the providers above process your data outside Algeria, in the countries shown in the table. Using the site, Synapse or our forms therefore involves transferring your data to those countries.
Article 44 of the law makes these transfers subject to authorisation by the ANPDP, which checks that the destination country ensures a sufficient level of protection. Icosmind applies for this authorisation for the transfers described here. Where the law allows, a transfer may also rest on one of the cases in Article 45, in particular your express consent or the need to answer your enquiry or perform your contract.
7. How long we keep it
- Enquiries, bookings and business correspondence: 36 months after the last contact.
- Synapse conversations: 12 months.
- Emails left to hear about our simpler offer: until you unsubscribe, and 24 months at most.
- Technical logs and IP addresses: 90 days.
- Proof of consent: as long as needed to demonstrate consent.
- Clients: for the duration of the contract, then for the periods required by Algerian accounting and tax law.
8. Security
We protect your data with encrypted connections, restricted named access, logging, backups and protection against bots and abuse. If a data breach occurs, we inform the ANPDP and, where the breach puts your rights at high risk, we tell you directly.
9. Your rights
Law 18-07 as amended gives you, in particular:
- the right to be informed before your data is collected (Article 32);
- the right of access: to know whether we process your data, why, which data and who receives it, and to obtain a copy (Article 34);
- the right to rectification: to have inaccurate or incomplete data, or data processed in breach of the law, updated, corrected, erased or locked (Article 35);
- the right to object, on legitimate grounds, and at any time to the use of your data for direct marketing (Article 36);
- the right to withdraw your consent at any time (Article 7).
To exercise a right, write to contact@icosmind.com and say what you are asking for. We may ask you to confirm your identity. We make the corrections you request within ten days. If we refuse or do not reply within that time, you can refer the matter to the ANPDP, to which you can also send any complaint.
We send you marketing emails only with your prior consent, and every one of them lets you object (Article 37).
11. Minors
Our services are for businesses and professionals. They are not intended for minors.
12. Changes
We may update this policy, in particular to follow the law's implementing texts and the ANPDP's decisions. The date and version appear at the top of the page, and we will tell you about any significant change.