Legal & Policies

📄 Privacy Policy Last updated: August 14, 2025 French version: https://lequeux-thomas.com/addin/site/legal/fr/ English version: https://lequeux-thomas.com/addin/site/legal/en/ 📧 thomas.lequeux.consulting@gmail.com https://lequeux-thomas.com/contact-us/ This Privacy Policy explains how Thomas LEQUEUX Consulting collects, uses, processes, and protects the personal data of users of the Excel add-in Easy Data Analysis Tools, accessible from https://lequeux-thomas.com/addin/ ________________________________________ 1. Data Controller The data controller is: Thomas LEQUEUX Consulting French micro-enterprise – SIRET: 94071918000017 Address: 5 Allée de l'Autan, 31850 Montrabé, France Contact email: thomas.lequeux.consulting@gmail.com ________________________________________ 2. Data Collected We only collect the data strictly necessary for the proper functioning of the add-in: • Email address • Subscription and payment history (via Stripe) • API request logs to the server • Number of tokens used for AI calls We do not collect or store Excel files, databases, or user data processed by the add-in. ________________________________________ 3. Purpose of Processing The collected data is used solely to: • Manage access to the service (plans, authorizations) • Validate the user’s license • Manage usage limits • Provide customer support when needed • Occasionally inform users of product updates or related offers No data is sold, rented, or transferred to third parties for commercial purposes. ________________________________________ 4. AI Analysis When the user triggers an AI analysis: • The selected table is converted to text and sent via a secure server of Thomas LEQUEUX Consulting to OpenAI’s API. • This server does not store or log the content of requests or responses. • The data sent to OpenAI is limited to the user’s explicit selection. • Processing by OpenAI is subject to their Data Processing Addendum. OpenAI may temporarily store requests for up to 30 days for quality control, without using them for training, in accordance with the activated “no training” mode. ________________________________________ 5. Security • The add-in works mainly locally for table generation. • Exchanges with the server or OpenAI’s API are made via secure HTTPS connection. • Passwords are never stored in plain text. • Authentication and password storage are managed by Supabase, with secure encryption. • Thomas LEQUEUX Consulting never has access to passwords. • Authentication tokens are securely managed and linked to the user ID. ________________________________________ 6. Data Retention • Subscription and payment data is kept for the duration of the subscription, then archived for the legal tax period (5 years). • Technical data (API calls, logs) is retained only for the time necessary to operate the service. • Support exchanges may be kept for service improvement or technical archiving. ________________________________________ 7. User Rights (GDPR) In accordance with Articles 15 to 22 of the GDPR, you have the following rights: • Right of access to your data • Right of rectification • Right of objection and erasure • Right to restrict processing • Right to portability To exercise your rights, please contact: 📧 thomas.lequeux.consulting@gmail.com ________________________________________ 8. Hosting and Subprocessors 8.1 Supabase – Database Management • Used for authentication and secure storage of user data (email, ID, subscriptions). • Passwords are encrypted and exclusively managed by Supabase, with no access in plain text for Thomas LEQUEUX Consulting. • Servers located in the EU, GDPR compliant. 8.2 Stripe – Payments and Subscriptions • Used for payment and subscription management. • Stripe processes payment data in compliance with PCI-DSS standards. • Thomas LEQUEUX Consulting never has access to users’ banking data. • Stripe is based in Ireland for EU customers (GDPR compliant). 8.3 Render – Backend Hosting • Backend server hosted via Render, located in Frankfurt (EU). • Manages API calls and license validation. • All communications go through secure HTTPS. 8.4 OpenAI – Artificial Intelligence Analysis • Used only when the user explicitly chooses to analyze data with AI. • Transmitted data is limited to the Excel selection made by the user. • “No training” mode activated, temporary storage max 30 days. • OpenAI acts as a subprocessor and applies its Data Processing Addendum. 8.5 Hostinger – Website • Hosts the showcase site https://lequeux-thomas.com (WordPress). • Cookie management and CNIL compliance in place. • No sensitive add-in data is stored via Hostinger. ________________________________________ 9. Cookies and Website The website https://lequeux-thomas.com may use cookies for audience measurement (Google Analytics) or functionality. A consent banner is in place in compliance with CNIL requirements. ________________________________________ 10. Updates This policy may be updated at any time in line with product developments or legal requirements. Last revision: August 14, 2025

✨ Ethical Charter Thomas LEQUEUX Consulting Easy Data Analysis Tools French version: https://lequeux-thomas.com/addin/site/legal/fr/ English version: https://lequeux-thomas.com/addin/site/legal/en/ 📧 thomas.lequeux.consulting@gmail.com https://lequeux-thomas.com/contact-us/ 📅 Version: August 14, 2025 ________________________________________ 🧭 1. Our Vision Easy Data Analysis Tools is a service developed by Thomas LEQUEUX Consulting, a French micro-enterprise specialized in supporting humanitarian and development actors. Aware of our ethical responsibility as a provider of technical solutions for humanitarian action, we commit to respecting the fundamental principles that guide the humanitarian sector. ________________________________________ 🤝 2. Fundamental Humanitarian Principles We adhere to universal humanitarian principles: • Humanity: relieve human suffering wherever it is found. • Neutrality: take no sides in any conflict. • Impartiality: provide the service without discrimination. • Independence: guarantee the autonomy of our technical decisions. ________________________________________ 🚫 3. Prevention of Sexual Exploitation and Abuse (PSEA) We adopt zero tolerance towards any form of: • Abuse of power • Exploitation or sexual harassment • Discriminatory or oppressive behavior We commit to working only with partners and users who adhere to these same principles. ________________________________________ ⚖️ 4. Data and AI Ethics Our tool uses AI to assist in data analysis. Therefore: • No sensitive personal data is collected or stored • Data sent to OpenAI is exclusively the data explicitly chosen by the user during the analysis setup • AI requests are solely intended to provide interpretations to the user and are never used for commercial purposes We encourage our users to anonymize data before any analysis. ________________________________________ 🕊️ 5. Commitment Against Violence, Terrorism, and Corruption We commit to providing our services only to actors who respect international humanitarian law. We refuse any collaboration with persons or entities involved in: • Financing or supporting terrorism • Serious human rights violations • Acts of corruption, abuse, or oppression We regularly verify our compliance with European and international regulations regarding sanctions and security. ________________________________________ 🧪 6. Responsibility and Transparency We strive to provide a service that is: • Transparent in its functioning • Respectful of data confidentiality • GDPR compliant Any breach or legitimate ethical report may be addressed directly to: 📧 thomas.lequeux.consulting@gmail.com ________________________________________ 📝 7. Review and Improvement This charter may be updated to remain aligned with evolving ethical practices and humanitarian standards. Last revision: August 14, 2025