commuResponsibility and scope
Bx Labs, SASU, 9 rue des Colonnes, 75002 Paris, France, processes the data needed to operate Commu and manage pilot accounts. For questions or requests about your data, contact contact@bxlabs.ai.
This page covers the Commu website, its demo and the pilot app. The settings and processing activities of the general Bx Labs agency website do not automatically apply to Commu. The organisation administering a community remains responsible for the information it chooses to publish and the people it invites.
Data and purposes
Creating an account uses a name, an email address and a password stored as a hash. Identifiers, dates and technical session information support authentication and security. Memberships, roles and invitations manage access. Discussions, replies, reactions, articles and images are stored to provide the requested features.
Account data and content are processed to provide the requested service. Preventing abuse, technical diagnosis and pilot management also serve Bx Labs' legitimate interest in operating and securing the service. Support requests are used to answer you and handle your request.
A real registration sends the supplied name, email, account identifier, registration date and product to the internal Bx Labs CRM. Aggregated counters track pilot usage; they do not send discussion text, articles or images. The website currently captures no advertising campaign, acquisition referrer or application audience measurement.
Visibility and recipients
Authorised community participants can access information according to their role. Enabling public reading makes discussions, replies, published articles and the images needed to read them available without an account. The directory, drafts and administration remain access-controlled. Bx Labs may access information needed to provide support.
Vercel delivers the website and application frontend. Microsoft Azure hosts the application service, PostgreSQL and images, configured in France Central. Convex provides the internal Bx Labs CRM in its European environment. These providers receive the data needed for their role and may process network and security metadata. Delivery networks and their companies' operations can involve processing outside the European Economic Area, subject to their data processing agreements and applicable transfer mechanisms. The service therefore does not promise that all processing occurs exclusively in France.
Cookies
Commu uses functional mechanisms to provide the requested service. The app session cookie, __Secure-commu.session_token over HTTPS, keeps you signed in for seven days, with activity-based renewal. The commu_locale cookie remembers an explicit app language choice for one year. The website remembers its language choice for 180 days using commu_site_lang. Preferences are specific to each host. Your browser also supplies preferred languages for the initial choice.
The demo keeps experiments and images in browser local storage, separately for French, English and Spanish, without automatic expiry. Reset restores the demo for the current language. Browser settings let you erase all local site data.
Commu currently loads no Google Analytics tool, advertising pixel or marketing attribution mechanism. Hosting providers still process technical data needed to deliver and secure the pages. Session and language preference mechanisms are separate from advertising cookies. CNIL information about cookies.
Retention and deletion
Account, access and content data are kept to operate the account and community. This version has no general automatic purge of inactive accounts or CRM contacts. Suspending access does not delete the account or its contributions. Bx Labs handles requests to leave or delete data at the contact address above; this version does not execute them through a self-service account deletion button.
Security needs, legal obligations or handling a dispute may justify limited retention of certain information. PostgreSQL backups and recoverable image storage deletion use a configured seven-day window. Removing an image from an article does not guarantee its immediate removal from all storage or backups. When handling a request, we clarify its deletion scope, including the internal CRM.
Your rights and contact
Depending on your situation and the conditions of the GDPR, you can request access, correction, erasure or restriction, object to certain processing and request portability of the relevant data. Send your request to contact@bxlabs.ai, identifying the account and community concerned. Proportionate identity verification may be needed to protect the account.
You may also contact the CNIL if you believe your rights have not been respected. Publisher information is in the legal notice.