PERSONAL DATA
Your conversation with Casian.
Limited data collection.
This policy covers the public website and access requests. Processing of investment deal information in the software is governed by the terms agreed with each fund. Updated October 8, 2026.
Data controller
CASIAN TECHNOLOGIES, a French SAS with share capital of €1,000, Versailles Trade and Companies Register number 130 259 807, registered office: 2B avenue Pigault Lebrun, 78170 La Celle-Saint-Cloud, France. Contact: contact@getcasian.com.
What we collect
The form collects your name, fund, work email, role, type and size of organization, number of decks you receive per week, and who decides on buying a tool, to process your access request. The message is optional. The other fields are required to process your request. Do not submit confidential documents or information about an investment deal.
A technical identifier, processing status, and content fingerprint help prevent duplicate requests. A network-address fingerprint limits abuse. The raw IP address is not stored in the requests table; providers may process it in technical logs.
Purposes and legal basis
We handle professional inquiries based on our legitimate interest in responding to people who contact Casian and processing their access requests. Abuse prevention and security rely on our legitimate interest in protecting the service.
A request does not subscribe you to a newsletter or marketing campaign. We do not sell collected contact information.
Who receives the information
Authorized Casian team members access the information needed to handle requests. Supabase stores requests in our Paris-based project; Resend provides email notifications; Vercel hosts the website. Notification copies arrive in Casian’s professional email system.
A database in Paris does not mean all processing takes place exclusively in France. Providers and their subprocessors may process information outside the European Economic Area. Their data processing agreements describe applicable safeguards, including standard contractual clauses where required: Supabase, Resend, and Vercel. Contact us for further information.
Retention
Requests and their technical tracking records are deleted from the database after 90 days by a daily cleanup, with a maximum additional technical delay of one day. Emails useful to the relationship are retained for no more than three years after the last exchange, unless a contractual need or legal obligation justifies separate retention.
Form operations logs are retained for 30 days. Providers also apply their own retention periods to logs needed for security and service operation.
Public screening trial
The free screening processes your PDF, or a startup’s website that you provide, to produce an analysis using an AI model provider and a dedicated service hosted on Oracle Cloud. For a website, Casian reads its home page and a few key pages at the time of the analysis; this text is not kept after the analysis. Based on the deck or the website, the analysis also looks up public information about the company, its founders and its market in official registers and web pages. The deck and result remain private to your session for 24 hours and are then deleted by a periodic cleanup. A necessary session cookie expires after 30 days, and derived browser and network identifiers are retained for 30 days to enforce the three-trial limit.
The submission date, required email address and optional profile are stored separately from the analysis for 90 days and copied to a private Google Sheet accessible to the Casian team. The Casian team also receives a Telegram notification for each trial, with its outcome and then the email address entered; the deck, the website address and the result are not included. The Sheet contains no deck or result. No document or result is emailed. Optional newsletter consent is recorded separately and does not verify the address; confirmation emails are not currently active.
Your rights
You may request access, correction, deletion, or restriction of processing and object to processing based on legitimate interests, subject to GDPR conditions. Data portability applies when its legal conditions are met.
Email contact@getcasian.com. We generally respond within one month and will explain any legally permitted extension. Proportionate identity verification may be required. You may lodge a complaint with the French data protection authority, CNIL.
Cookies and analytics
The website uses Vercel Web Analytics to measure visits and page views. It does not use an analytics cookie and provides anonymized statistics. No advertising cookies are set. Internal request statistics track handling without creating a browsing profile. Language selection uses links and does not require a tracking cookie.
Policy changes
This policy will be updated if purposes, tools, or processing terms change. Its update date appears at the top of the page.