Skip to content

Privacy policy

Updated in October 2026.

This policy describes how PRELUD processes the personal data collected on the prelud.app website and on the Prelud platform (the application available after sign-up). It applies from your first visit.

Data controller

PRELUD, a French SAS with a share capital of €1,000, 60 rue François Ier, 75008 Paris, France, registered under number 102 684 586 R.C.S. Paris. Contact for any question about your data: contact@prelud.app.

Data we collect

On the website

  • Contact form: name, email address, message.
  • Mailing list (opening of the fundraising journey, launch offer): email address.

On the platform

  • Account: first name, last name, email address, company name, password (stored only as a hash).
  • Sign in with Google: if you choose this sign-in method, Google provides us with your email address, confirmation that it is verified, and your first and last name. We do not access any other data from your Google account (no emails, contacts or files).
  • Fundraising file: the information you enter about your project and company (description, figures, team, documents), your conversations with the artificial intelligence agents, and the scores and documents generated.
  • Company data: name, SIREN number and public information from the INSEE Sirene register, when you enter your company.
  • Billing: plan subscribed, billing history. Card details are entered and stored by Stripe; PRELUD never has access to them.
  • Technical data: connection logs (IP address, date, browser) and an audit log of sensitive actions, for security purposes.

Purposes and legal bases

  • Creating and managing your account, providing the service (file audit, Scorecard, documents, AI agents): performance of a contract.
  • Authenticating you, including with Google, and securing the platform (fraud and abuse prevention): performance of a contract and legitimate interest.
  • Invoicing and bookkeeping: legal obligation.
  • Answering your messages: legitimate interest.
  • Sending you news from the mailing list you joined: consent, which you can withdraw at any time via the unsubscribe link or by email.
  • Sending emails required by the service (password reset, account notifications): performance of a contract.

Your data is never sold, rented or used for targeted advertising.

Artificial intelligence

The assistance features (audit, Scorecard, drafting) send the relevant parts of your file to our AI model provider, Anthropic, solely to produce the requested answer. Under this provider’s commercial terms, this data is not used to train its models. Visuals are generated by Replicate from a text description that contains no personal data.

Data received from Google

Prelud’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This information is used only to create your account and sign you in; it is not transferred to third parties, not used for advertising, and not used to train artificial intelligence models.

Recipients and processors

Your data is accessible to the PRELUD team, on a need-to-know basis, and to its technical providers, acting on its instructions:

  • Railway Corporation (United States) — hosting of the website, application and database, on servers located in the European Union (Amsterdam).
  • Anthropic, PBC (United States) — artificial intelligence models.
  • Replicate, Inc. (United States) — image generation.
  • Resend, Inc. (United States) — email delivery and mailing list.
  • Stripe Payments Europe, Ltd. (Ireland) — payments.
  • Google Ireland Limited (Ireland) — sign in with Google and team email.
  • INSEE (France) — lookups in the public Sirene register.

Transfers outside the European Union

Some providers are based in the United States. These transfers are covered by the EU–US Data Privacy Framework where the provider is certified, or otherwise by the European Commission’s standard contractual clauses.

Retention periods

  • Account and file: for as long as the account exists, then deleted within 3 months of its closure. An account inactive for 3 years is closed after prior notice.
  • Contact form messages: 3 years from the last exchange.
  • Mailing list: until you unsubscribe, and no more than 3 years after your last interaction.
  • Accounting records and invoices: 10 years (article L. 123-22 of the French Commercial Code).
  • Connection logs: 1 year.

Cookies and local storage

Neither the website nor the platform sets audience measurement or advertising cookies. The platform only uses storage required for it to work: keeping you signed in, display preferences (theme, collapsed menu), and a temporary security cookie during sign-in with Google. As this storage is strictly necessary, it does not require consent.

Security

Traffic is encrypted (HTTPS), passwords are hashed, each company’s data is isolated in the database, and access to systems is restricted to authorised people. Two-factor authentication is available for your account.

Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to its processing, to withdraw your consent at any time, and to set instructions for what happens to your data after your death. To exercise these rights, write to contact@prelud.app; we reply within one month. If you signed in with Google, you can also remove Prelud’s access from your Google account settings.

You may lodge a complaint with the French data protection authority, the CNIL, 3 place de Fontenoy, 75007 Paris, France — cnil.fr — or with the authority of your country.

Who the service is for

Prelud is intended for founders and companies. The service is not intended for people under 18.

Changes

This policy may change. The update date is shown at the top of the page; account holders are informed by email of any significant change.