Privacy Policy

Last updated: July 24, 2026

This Privacy Policy explains how Maydream SAS ("we", "us") collects, uses, and protects your personal data when you use AskMaud (the "Service"). We comply with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Data Controller

Maydream SAS, Tour de Lyon, 185 rue de Bercy, 75012 Paris, France.
Contact: support@adforum.com

2. Data We Collect

Account data (via LinkedIn Sign-In)

When you log in with LinkedIn, we receive and store: your email address, name, and profile picture URL. We do not access your LinkedIn connections, posts, or any other data beyond basic profile information.

Usage content

We store the prompts, questions, conversation titles, saved items, and search history you generate while using the Service, so that you can return to them later.

Subscription and billing data

If you subscribe to a paid plan, the purchase is made on AdForum (www.adforum.com), Maydream's commerce platform, where payment is processed by Stripe, Inc.. We do not store your card details. AskMaud receives from AdForum your subscription status and plan entitlements.

Technical data

We use Plausible Analytics, a privacy-friendly, cookieless analytics tool that does not collect personal data or track you across sites. It records aggregate, anonymous page views.

Partner evaluation requests

If you request evaluation access to our Partner API and sign the evaluation agreement online, we store the details you enter about your company and its contacts (name, job title, email address), the handwritten signature you draw, the text of the agreement as signed, a SHA-256 fingerprint of that text and signature, and the date, IP address and browser details of the submission. This is proof that the agreement was concluded and by whom. You keep permanent access to your own copy of all of it through the private link shown when you sign.

3. Purposes and Legal Bases

  • Providing the Service (account, chat history, saved content) — performance of contract (Art. 6(1)(b) GDPR).
  • Processing payments and subscriptions — performance of contract and legal obligation.
  • Security, fraud prevention, and abuse detection — legitimate interest.
  • Aggregate analytics to improve the Service — legitimate interest (no personal data involved).
  • Recording and evidencing signed partner evaluation agreements — our legitimate interest in retaining proof of who signed and what they signed, and, for the retention period, the establishment, exercise or defence of legal claims. The agreement itself is with the company, not with the individual signing it.
  • Publishing credits on creative works (names and roles of the people credited on a campaign) — our legitimate interest in maintaining a complete record of advertising work, which is also how we provide the information required by Article 14 GDPR to those individuals. Partners given evaluation access are contractually barred from contacting, profiling or marketing to them.

4. Sub-processors

We share necessary data with the following providers, who process it on our behalf under appropriate contractual safeguards:

  • Google Cloud Platform (Google LLC, USA) — hosting and database infrastructure.
  • OpenAI, L.L.C. (USA) — AI model provider. Your prompts are sent to OpenAI to generate responses. OpenAI does not use API data to train its models.
  • Stripe, Inc. (USA) — payment processing (via AdForum checkout).
  • LinkedIn Ireland Unlimited Company — authentication.
  • Plausible Insights OÜ (Estonia, EU) — anonymous analytics.

Transfers to providers located outside the EU/EEA (Google, OpenAI, Stripe) are covered by the European Commission's Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

5. Retention

  • Account data: kept while your account exists; deleted within 30 days of account closure.
  • Prompts and chat history: kept until you delete them or close your account.
  • Billing records: kept for 10 years, as required by French commercial law.
  • Security logs: up to 12 months.
  • Signed partner evaluation agreements and their signature records: kept for the duration of the agreement and for 5 years thereafter, the period during which a claim may be brought under French law.

6. Your Rights

Under the GDPR, you have the right to: access your data, rectify it, erase it, restrict or object to processing, request portability, and withdraw consent at any time. You can delete your prompts directly in the app. For any other request, email support@adforum.com. We will respond within one month.

You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

7. Security

We apply industry-standard technical and organizational measures to protect your data: encryption in transit (TLS), access controls, and infrastructure hosted on Google Cloud. No method is 100% secure, but we work continuously to protect your information.

8. Cookies

AskMaud does not use advertising or tracking cookies, and does not share data with ad networks.

Strictly necessary cookies

These are required for the Service to function and do not require your consent under CNIL guidelines:

  • Session cookie — keeps you signed in after LinkedIn authentication.
  • AdForum / Stripe — set during checkout on adforum.com to process payments securely and prevent fraud.
  • LinkedIn — set by LinkedIn during the sign-in flow.

Analytics (no cookies)

We use Plausible Analytics, which is cookieless. It does not store cookies on your device, does not collect personal data, and does not track you across websites.

You can block or delete cookies via your browser settings; disabling strictly necessary cookies will prevent you from signing in or completing a payment.

9. Children

The Service is not intended for persons under 16. We do not knowingly collect data from children.

10. Changes

We may update this Policy. The "Last updated" date at the top reflects the latest revision. Material changes will be notified in-app.

11. Contact

For any privacy question: support@adforum.com.