janyl

Privacy

Last updated 3 September 2026

This page says what happens to information about you when you read this site or send us the questionnaire on First steps. It is written to be read rather than scrolled past, and where the law left us a choice we took the side that gives you more control, not the side that gives us more room.

Who is responsible

janyl is being incorporated in France as a société par actions simplifiée. Until that company is on the register it is not a legal person, so it cannot be the one answerable to you. The people who decide what is collected here and what is done with it are Mike Solomon and Kenza El Araki, janyl’s two founders, and they are the data controllers for everything described on this page. When the company is registered it takes that role from them, and this page will be updated to name it, with its registration number and its registered address.

You can reach us about any of this at [email protected], or by post at 197 rue de Lourmel, 75015 Paris, France.

We have not appointed a data protection officer, and we do not believe we need one. The GDPR requires one of public authorities, of organizations whose core activity is monitoring people on a large scale, and of those handling sensitive data on a large scale. janyl is none of the three, and a title we invented for ourselves would tell you nothing. If that changes, so does this paragraph.

What we collect

Two things, and nothing else.

The questionnaire

The form on First steps asks for your name, your company, the size of your company, your sector, your email address, whether you already have an agent deployed, and a free text box that begins Our company culture is... Only the name, the company and the email are required; every other answer can be left blank and the form will still send. It also records the moment you pressed send, and it carries one hidden field that only an automated submission would ever fill in, which we discard.

Your visit to this page

Asking for a page means your device asks our host for it, so our host handles your IP address, which page you asked for, when you asked, and what your browser reports itself to be. Every website on the internet works this way and none can avoid it. We do not read those records and we do nothing with them; they exist so that the site can be served and defended when somebody attacks it.

What we do not do

This site sets no cookies. It stores nothing in your browser: no local storage, no session storage, no database on your device, nothing that survives you closing the tab. It carries no analytics of any kind, so we do not know how many people read a page, how long they stayed, or where they came from. There are no tracking pixels, no advertising, no social buttons, no embedded video from anywhere else, and no third party JavaScript. We do not profile you, we make no automated decisions about you, we buy no lists, and we will not sell, rent or hand what you send us to anybody who wants to sell you something. There is no cookie banner here because there is nothing for you to refuse.

There is no exception to that. The typefaces these pages are set in are served from this site, not from Google Fonts or any other font host, so your browser never asks a third party for them and no third party sees your address because you read a page here.

Why, and on what legal basis

To answer you. We use what the questionnaire tells us to reply to you, to work out whether janyl can help, and to have the conversation that follows. Nothing else. The legal basis is your consent, article 6(1)(a) of the GDPR: you give it by filling the form in and pressing send, having been told on this page what happens next, and you can take it back at any moment by writing to us. Withdrawing does not unmake what was lawful while the consent stood, and it costs you nothing. We could have relied on our own legitimate interest instead, which is the usual choice for a contact form, and we did not, because consent is the basis that leaves the decision with you.

To serve the site and keep it standing. The connection records described above are handled on the basis of our legitimate interest, article 6(1)(f), in the site being available and not being abused. There is no way to serve a web page without them. You can object to this, and the section on your rights says how.

We do not use anything you send us for marketing. If we ever want to, we will ask you separately and you will be free to say no.

How long we keep it

A completed questionnaire arrives as an email in one mailbox and that is the only place it lives. We delete it, and the thread that grew out of it, twelve months after our last exchange with you at the latest, and sooner than that if you ask us to. Twelve months is a good deal shorter than the three years the CNIL treats as the norm for a business prospect, and we chose it deliberately: if we have not spoken in a year, we have no business still holding your answers.

If we end up working together, the correspondence becomes part of that working relationship and is kept for as long as that relationship and the accounting rules that follow it require, not for twelve months.

The connection records our host keeps are kept by our host, on its own security schedule rather than ours, and are deleted by it.

Who else sees it

Two companies, both working only on our instructions and both under a written data processing agreement:

  • Cloudflare serves these pages, and carries the questionnaire from your browser to our mailbox.
  • Fastmail runs the [email protected] mailbox where what you send us is kept.

That is the whole list. There is no database, no CRM, no spreadsheet and no analytics account: your answers are an email and nothing more. At janyl only the two founders read them. Nobody else is given them, other than where a law obliges us to hand something over.

What leaves Europe

Both of those companies are established outside the European Economic Area, so some of what is described here is transferred out of it. We would rather this section were shorter than it is, and it is the honest version.

  • Cloudflare, Inc. is a United States company. Transfers to it are covered by the standard contractual clauses adopted by the European Commission, and by Cloudflare’s certification under the EU-US Data Privacy Framework.
  • Fastmail Pty Ltd is an Australian company and our mailbox is on its European region, held in Amsterdam. Fastmail is clear that its European region is not a promise that data stays only in Europe: replicas, emergency backups and system logs also sit on its United States servers. Transfers to it are covered by the standard contractual clauses adopted by the European Commission.

You can ask us for a copy of the safeguards either company relies on, and we will send you what we have.

People you mention

The last box on the questionnaire asks about your company culture, and the natural way to answer it is to describe the people you work with. Anything you write about a named colleague is their personal data rather than yours, they have not been told we hold it, and we have no way of telling them. So please write about your company rather than about people we could identify. If a name reaches us anyway we will take it out, and if you tell us one is there we will take it out the day you write.

Keeping it safe

Every page here is served only over an encrypted connection, and the questionnaire is sent over one. What you send arrives in a single mailbox that only the two founders can open. There is no copy of it anywhere else for anybody to find.

Your rights

All of these are yours under the GDPR and under the French loi Informatique et Libertés. You do not have to give a reason for any of them.

  • Access. Ask what we hold about you and get a copy of it.
  • Rectification. Have anything wrong put right, and anything missing completed.
  • Erasure. Have it deleted.
  • Restriction. Have us stop using it, without deleting it, while a question about it is settled.
  • Portability. Receive what you gave us in a machine readable file, or have us send it straight to somebody else.
  • Objection. Object to our handling anything on the basis of our legitimate interest.
  • Withdrawal of consent. Take back the consent you gave by sending the questionnaire, at any time, and for any reason or none.
  • Instructions for afterwards. Tell us what you want done with your data after your death, generally or specifically, and change your mind whenever you like.

How to use them

Write to [email protected] and say which one you want. That is the whole procedure. There is no form, no portal and no fee, and we answer within one month of your message. If a request is genuinely complicated we may take longer, up to three months in total, and we will tell you inside the first month if that happens. We will not ask you to prove who you are unless we honestly cannot tell, and if we do ask, we will ask for the least that settles it.

If we get it wrong

You can complain about us to the CNIL, which is the French supervisory authority for data protection and the one that oversees us. You do not have to write to us first, and complaining is free.

CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr/fr/plaintes.

If this page changes

The date at the top is the date this page last changed. When the company behind janyl is registered, this page will name it here rather than its founders, and that will be the first change. We will not quietly widen what we do with what you have already sent us: if the purpose changes, we will ask you again.