Privacy policy

Last updated: 21 October 2026.

This privacy policy describes how Asynth SAS (“Asynth”, “we”) processes personal data through Idem, its internal software system, and in particular the data obtained from Google services. It supplements the legal notice of Asynth SAS.

1. Data controller

The data controller is Asynth SAS, 1165 avenue Jean-René Guillibert Gauthier de la Lauzière, CS 20583, 13290 Aix-en-Provence Cedex 2, France, registered with the Aix-en-Provence Trade and Companies Register under number 512 162 926. Any question may be sent to [email protected].

2. Scope

Idem is used exclusively by authorised members of Asynth SAS, with Google accounts and YouTube channels that Asynth SAS owns or manages. Each connection is authorised by the account holder through Google's consent screen. Idem is not offered to the public, and no person outside Asynth SAS may connect an account to it.

3. Data accessed

Within the permissions granted by the account holder, Idem may access the following data:

• Gmail: reading messages and their attachments, preparing drafts, and organising messages by labels;
• Google Drive and Google Docs: reading files, and creating or editing documents;
• Google Calendar: reading events and, where requested, creating or modifying them;
• YouTube: uploading videos to the channels connected by the account holder, and managing their details, visibility and playlists.

This data may include personal data of the account holder and of the persons with whom Asynth SAS corresponds, such as names, e-mail addresses and the content of exchanges.

4. Purposes and legal basis

The data is processed solely to perform the tasks that an authorised member asks of Idem in the course of the activities of Asynth SAS, such as finding a document, preparing the draft of a reply, organising a calendar or publishing one of the company's videos. This processing is based on the legitimate interest of Asynth SAS in organising its work efficiently (Article 6(1)(f) GDPR).

The data is never sold, never used for advertising, and never used to build user profiles. No e-mail is sent and no video is made public without the prior approval of an authorised member.

5. Google API Services User Data Policy

Idem's use and transfer to any other application of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• data obtained from Google APIs is used only to provide the features requested by the account holder;
• it is not transferred to third parties, except as necessary to provide those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to the account holder;
• it is not used for advertising, including retargeting, personalised or interest-based advertising;
• it is not read by humans, except with the account holder's consent, for security purposes, to comply with applicable law, or where the data has been aggregated and anonymised;
• it is not used to develop, improve or train generalised artificial intelligence or machine learning models.

Idem's use of YouTube is subject to the YouTube Terms of Service, and the processing of data by Google is governed by the Google Privacy Policy.

6. Recipients and processors

The data is accessible only to authorised members of Asynth SAS. To carry out a request, the relevant content may be processed by the provider of the artificial intelligence model that runs Idem, acting as a processor under its commercial terms, which exclude the use of that content to train its models. The data may also be processed by the providers hosting the systems of Asynth SAS. No other third party receives data obtained from Google APIs.

7. International transfers

Some processors may be located outside the European Union, in particular in the United States. Any such transfer is governed by appropriate safeguards provided for by the GDPR, such as the standard contractual clauses adopted by the European Commission or an adequacy decision.

8. Retention

• Google access tokens are kept on systems managed by Asynth SAS until the access is revoked.
• The content of messages, files and videos is not copied or stored by Idem: it is processed only for the duration of the request in progress.
• Notes that an authorised member expressly asks Idem to keep are retained on behalf of Asynth SAS until that member deletes them.

9. Security

Asynth SAS implements technical and organisational measures appropriate to the risks, including restricted access to authorised members, encryption of data in transit, and the protection of access credentials. Actions with external effect, such as sending a message or publishing a video, require the prior approval of an authorised member.

10. Rights of data subjects

Any person whose data is processed through Idem has the right to access, rectify and erase that data, to restrict or object to its processing, and to data portability, under the conditions laid down by the GDPR. These rights may be exercised by writing to [email protected]. Any person may also lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), www.cnil.fr.

11. Revoking access

The holder of a Google account may revoke Idem's access at any time from the security settings of the account, at myaccount.google.com/permissions. Revocation ends all access by Idem to the data of that account.

12. Changes

Asynth SAS may amend this policy to reflect changes in Idem or in the applicable rules. The date of the last update appears at the top of this page.