Privacy and Personal Data Protection Policy

Last Updated: June 2026

At Pigment we take Privacy and Data Protection seriously. In this Privacy and Data Protection Policy (the “Policy”) we have set out how we process personal data as data controller, for instance when you visit this website, attend an event organized by or with Pigment, request a trial, sign-up to our newsletters, when we connect with you on social networks, when you click on our ads or when we perform specific activities such as the development and improvement of our Pigment AI Features.

This Policy does not apply to the use of Pigment’s SaaS products and services that are provided to our customers under specific contractual terms. If you want to learn more about this, do not hesitate to contact us.

Let’s start from the beginning: who is Pigment?

When we refer to “Pigment” in this Policy, we mean Pigment SAS, a French simplified joint stock company with a capital of 26,474.4202 euros registered with the trade and commercial register of Paris under n° 852 785 914 and having its head office at 8 rue Sainte-Cécile, 75009 Paris, France ("Pigment"), acting as data controller of personal data under our control.

What is “personal data”?

Within the meaning of the European Data Protection Regulation No. 2016/679 (known as "GDPR") entered into force on May 25, 2018 and of the French Law n° 78-17 of 6 January 1978 "Informatique et Libertés" in its amended version (“French law Informatique et Libertés”), “personal data” consists of any information that relates to an identified or identifiable individual, such as a name, email address, telephone number, and IP address.

What personal data do we process about you?

At Pigment, we process the following personal data about you:

Your identification data and professional contact details: name, image, email address, postal address, phone number, professional data about your company, location data.

Any data you give us during exchanges and you decide to share with us: when we are in contact, you may provide us with additional information based on why we are exchanging. For instance:

Communication data: emails, phone and call recordings and transcriptions (e.g. webinars, customer calls), newsletters opt-in.

Data shared by you: forms or tickets raised (including attachments), data shared before or during demos.

Data obtained during events: events recordings, photographs, videos.

Data you give us for billing and contractual purposes: contractual data, billing data, bank account data, payment data, number of application licenses used, renewal dates, purchase dates, etc.

Data related to your usage of our website and our solution (including during the trial period if relevant) and related Pigment services: statistics, traffic patterns, application and feature usage, interactions, session data, telemetric data, page views, geolocation data etc.

Data related to your experience of our Pigment application: feedback, satisfaction survey, satisfaction score, support interactions, user behavior patterns, pain points, feature request or improvement suggestions, case study and customers’ testimonials.

Data provided in our Community website: data necessary to register (identification data, contact details, data about company), data submitted and published by users, analytics about how Community is used.

Third-party information about you and information collected from open and public databases: we work with partners and providers (including advertising, enrichment and analytics providers) to help us operate our services and improve our product. They may share with us information about you such as your identification data, professional contact details, professional social media url data related to your usage of our solution and data about your activities on our website and other sites to give you personalized ads depending on your browsing activities and the interest you showed.

Information provided by our customers within the context of specific contractual terms we agreed upon, in particular, when we process personal data to provide, develop and improve our Pigment AI Features (input and outputs).

Analytics and marketing cookies data: data collected through the cookies added on our different websites and on our platform (including during the trial period if relevant). For more information about cookies, please visit our website cookie policy here.

Concretely, why do we collect your personal data and what else should you know (i.e. purposes, legal bases, and retention periods)?

Pigment takes respecting privacy and protecting your personal data seriously. We have placed at the center of our commitments the respect and protection of the privacy and personal data of our customers and users, and consequently to comply with applicable laws and regulations, and in particular the French law Informatique et Libertés as amended and the EU and UK GDPR, but also to ensure better data protection for the purpose of improving our products and services.

The table below contains the details of the purposes (the reasons for which Pigment can process your data), along with the relevant legal basis (the grounds on which Pigment relies to have the right to process personal data which) and the retention periods (the time during which Pigment can process personal data, based on the time necessary to achieve the purposes).

Why	Legal basis*	Data retention period
For marketing and advertising (i.e. invitation to demos, webinars and events, sending newsletters and communications, personalized advertising)	• Legitimate interest	For 3 years from the end of the contract or from the last positive engagement with the customer or prospect.
For business development (i.e prospection, lead research, prospect data enrichment)	• Legitimate interest	For 3 years from the end of the contract or from the last positive engagement with the customer or prospect.
To improve our services (i.e new features analysis, customer data enrichment, customer data analysis, customer feedback, product logs...)	• Performance of the contract. • Legitimate interest. • Consent	For the duration of the contract.
To manage your relationship with us (i.e billing, contractual documentation, payment, fraud management...)	• Performance of a contract • Legal obligation	For the duration of contract and the duration of the limitation period (in case of a dispute or litigation).
For analytics and marketing cookie tracking on our websites	• Consent	See cookie policy of each website for more information.
To comply with the law or regulations and to respond to lawful requests from the authorities	• Legal obligation	For the duration necessary to comply with the law.

*Legal basis under article 6 of the GDPR, data controllers can rely upon several legal bases

How long is Pigment keeping your personal data?

We will keep and retain your data according to the timeframes set forth in our agreements with our customers or in compliance with applicable laws and regulations. For more specific information, please see the table above.

Is the processing of your personal data secure?

Pigment has implemented a number of measures to protect your privacy and personal data and to meet the requirements of the GDPR.

Regarding the security measures implemented to protect personal data from any risk of violation, unauthorized disclosure or attack on their integrity, Pigment has deployed all the necessary means with its teams and service providers to minimize the risk of security breaches, in particular:

Website SSL.
We strive in particular to maintain 24/7 systems monitoring in order to ensure the security of the personal data we process.
Our sites are regularly scanned for security breaches and vulnerabilities and we take the necessary precautions to avoid the loss, abuse or alteration of personal data.

To whom do we share your personal data with?

Is your personal data shared within the Pigment group?

We may share your Personal Data with other entities that are part of Pigment Group (i.e Pigment Inc. (USA), Pigment Corp. (Canada), Pigment Global Limited (UK) and Pigment GmBh (Germany), if necessary.

Is your personal data shared outside Pigment?

Your personal data may be shared with our service providers (in particular, with IT services providers, billing providers, analytics, advertising, enrichment, marketing and event providers) or partners.

When your personal data is shared outside Pigment, we make every effort to select our service providers and partners on the basis of very demanding criteria in terms of privacy, data protection and security. All personal data transfers are secured contractually.

Your personal data may also be shared to providers located outside of the European Economic Area (“EEA”). In such case, we ensure that our providers are:

Located in a country considered having an adequate level of protection by the European Union in terms of personal data, or
They are bound by contractual provisions ensuring an equivalent level of protection of your personal data (i.e. standard contractual clauses established by the European Commission) or the transfer is otherwise permitted under the GDPR.

We may also have to share your personal data with a regulator or to otherwise comply with the law.

We will not share your personal data differently than described in this section.

Your rights?

Within the limits and conditions of applicable data protection laws, you can request us to:

Access your personal data.
Rectify your personal data.
Erase your personal data.
Restrict the processing of your personal data.
Object to the processing of your personal data.
Transfer your personal data to another provider (right of portability).
Withdraw your consent at any time.

You can also lodge a complaint with a competent supervisory authority (for instance, the CNIL in France).

How to contact us?

If you want to exercise your rights and for any questions regarding this document and, in general, about the collection and processing of your personal data by Pigment, do not hesitate to contact us by e-mail: dpo@pigment.com or send us a letter at: Pigment SAS - Data Protection Officer, 8 rue Sainte-Cécile, 75009 Paris (France).

What else?

Changes. This Privacy and Data Protection Policy may be updated from time to time, in particular to take into account changes in our services, technologies or applicable regulations. These updates will be effective immediately when they are made available and searchable on our website.

Cookies? If you want to read more about cookies, please click here.

Table of Contents