Privacy policy
Last updated: October 8, 2026
This is a courtesy translation; the French version (Politique de confidentialité) prevails. This policy explains how Scaaze collects, uses and protects your personal data when you browse the website, request a callback, book a call or attend one of our training courses, in accordance with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
01 Data controllers
VIGIE (Vigie AI Factory), a French simplified joint-stock company registered with the Nanterre Trade and Companies Register under number 931 886 659 and operating the Scaaze brand (formerly Rozawa), is the data controller for data collected on the website and in the course of the business relationship: callback requests, appointments, quotes and consulting engagements.
COLANA FORMATION, the training provider that delivers the courses, is the data controller for the data needed to administer training: enrollment, invitations, attendance sheets, assessments, certificates and funding. VIGIE passes on only what is strictly necessary to organize the course you enroll in.
The details of both companies are given in the Legal notice. For any question about your data: contact@rozawa.com.
02 Data we collect
We only collect the data our business requires:
- “Request a callback” form: first name, last name, company, work email, phone number, what you need (AI agents or AI training), plus the language, the page the request was sent from and the country you connect from;
- Requests from our ads: if you reach our training page by clicking one of our Google ads, the course you picked, your consent to be called back and the campaign parameters in the page address (gclid, gbraid or wbraid click ID, utm parameters) are sent with your request. They are read when you submit the form and never stored in your browser;
- Technical anti-spam data: IP address and Cloudflare Turnstile token, used to block automated submissions and limit the number of requests;
- Appointment booking: name, email and the details you enter in Cal.com when you book a call;
- Training records: enrollment, attendance sheets, assessments, satisfaction surveys, attendance and completion certificates, and funding documents, as required by the Qualiopi certification;
- Billing: billing details and payment data, excluding card numbers, which we never store;
- Email: your correspondence with our team.
03 Purposes and legal bases
The legal obligations referred to include, in particular, those of the French Labour Code and the Qualiopi certification. You may object to receiving our commercial communications at any time by writing to contact@rozawa.com.
04 Recipients and processors
Your data is accessible to the Scaaze team (VIGIE and COLANA FORMATION) and to the following processors, to the extent each operation requires:
- Cloudflare, Inc. (United States): website hosting, Turnstile anti-spam protection and processing of the callback form;
- Resend, Inc. (United States; emails hosted in the European Union, eu-west-1 region): the notification sent to our team and the acknowledgement sent to you;
- Cal.com, Inc. (United States): appointment booking;
- Scaaze’s in-house CRM, hosted by Vercel, Inc. (functions run in Paris) and Supabase, Inc. (database in Paris, eu-west-3 region): recording and following up your request;
- Google Ireland Ltd (Google Workspace): business email;
- Your OPCO (French joint training funds) or funding body, where applicable: the documents required to fund the course.
Your data is never sold or rented to third parties.
05 Retention periods
Beyond these periods, data is deleted or anonymized unless the law requires a longer retention period. Your IP address is not logged by the form: it is only used at the time of submission for the anti-spam check and rate limiting.
06 Transfers outside the European Union
Some of our processors (Cloudflare, Resend, Cal.com, Vercel, Google) are based in the United States or may process data there. These transfers are covered by the European Commission’s standard contractual clauses or by the provider’s certification under the Data Privacy Framework.
Our CRM data and transactional emails are hosted in the European Union.
08 Your rights
Under the GDPR and the French Data Protection Act, you have the rights of access, rectification, erasure, portability and restriction of processing, the right to object to processing, and the right to withdraw your consent at any time where processing relies on it.
To exercise these rights, write to contact@rozawa.com with proof of your identity. We reply within one month at the latest.
You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).