01Who we are
This policy explains what personal data Dots for Claude collects, why, and what you can do about it. It covers the one-pager at dotslabs.io/claude, the learning app behind it, and the dotslabs.io home page.
The data controller is NeoLabs, the company behind Dots. To reach us about your data, use the contact form and choose “Other”.
Dots for Claude is an independent course. It is not affiliated with or endorsed by Anthropic, and using Dots does not send your data to Anthropic. The hands-on challenges happen in your own Claude account: what you do there is governed by Anthropic’s own terms and privacy policy, and Dots does not see it — you only tick a short self-check in Dots.
02What we collect, and why
| Data | Why we use it | Legal basis | How long we keep it |
|---|---|---|---|
| Account: name, e-mail address, password (stored only as a salted hash), optional phone number, city, country, professional role, interface language | Create and run your account, sign you in, suggest the courses that fit your role, send service e-mails (confirmation code, password reset, payment receipt) | Contract (our terms) | While your account is active; deleted or anonymised 3 years after your last activity, or sooner on request |
| Learning progress: answers, skills passed, chapters completed, self-checks, duels, dates | Show your progress and your skills brain, decide when a skill “lights up”, resume where you stopped | Contract | Same as your account |
| Payments: amount, currency, date, plan, status and the Stripe reference | Give you the access you paid for, answer billing questions, keep our accounts | Contract and legal obligation (accounting) | 10 years, as French accounting law requires |
| Course e-mails: your e-mail address, first name, which of these e-mails you received, whether and when you opened each one, and whether you followed its link | Up to three e-mails after you sign up: a welcome with your first chapter, the next chapter and the offer two days later, what full access opens after six days (not sent if you have bought); and, now and then, news about the course. Every one has a one-click unsubscribe link. Each carries a tiny invisible image: when your mail app loads it, we note that the e-mail was opened, so we can tell which e-mails are useful. Turning off images in your mail app stops this. | Our legitimate interest in following up on the account you created; you can object at any time with the unsubscribe link | Same as your account |
| Contact form: name, e-mail, subject, message, and the page you wrote from | Answer you and follow up on your request | Your request and our legitimate interest in answering it | 3 years after our last exchange |
| Technical logs: IP address, browser type, date and time of requests | Keep the service secure, stop spam and abuse, fix errors | Legitimate interest (security) | 12 months at most |
| Site analytics: see the next section | Measure how the site is used | None needed for anonymous counts; your consent for the rest | See below |
Card details never reach us. Payments are handled by Stripe on its own secure page; we never see or store your card number.
We do not sell your data, and we do not use it to make decisions with legal effects about you.
03Site analytics
Without your consent
We only count page views anonymously: which page was viewed and when. No cookie is set and no identifier is used, so these counts cannot recognise you from one page or one visit to the next.
With your consent
If you accept analytics in the cookie banner, we set two first-party cookies on dotslabs.io:
dots_vid— a random visitor identifier, kept for 13 months at most;dots_sid— a session identifier that expires after 30 minutes without activity.
They let us measure how visitors move between pages, how many go through sign-up and payment, and which campaign brought them — the
utm_* parameters and the gclid / fbclid click identifiers present in the link you followed. These measurements stay with
us. Analytics events are kept for 25 months at most, then deleted or reduced to anonymous totals.
If you then create an account, the campaign and, with your consent only, the ad click identifier are kept with your account. We may send that identifier back to the advertising platform (for example Google Ads) to report that a click led to a sign-up or a purchase — no name, e-mail or other account detail is sent with it.
No advertising cookies
Dots sets no third-party advertising cookies today. If we add any later, they will be listed in the cookie policy and asked for before they are set.
You can change your choice at any time with the “Cookie settings” button at the bottom of every page.
04Who processes data for us
Only the people at Dots who need it to run the service can access your data. We use these providers, bound by data processing terms:
- Microsoft Azure (Microsoft Ireland Operations Ltd) — hosting of the site, the app and the database, in the France Central region;
- Microsoft Azure Communication Services — sending our e-mails (confirmation codes, password resets, receipts, replies);
- Stripe (Stripe Payments Europe Ltd) — card payments. Stripe also processes some data as an independent controller, for example to prevent fraud; see Stripe’s privacy policy;
- Google Fonts — our pages load their typefaces from Google’s servers, which therefore receive your IP address. No cookie is set.
We may also disclose data when the law requires it.
05Transfers outside the EU
Your data is stored in the European Union. Microsoft, Stripe and Google belong to groups based in the United States and may access some data from there. Such transfers rely on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.
06Security
Traffic is encrypted (HTTPS), passwords are stored only as salted hashes, access to the database is restricted, and sessions expire. No system is perfectly secure: if a breach put your data at risk, we would notify you and the authorities as the law requires.
07Your rights
Under the GDPR and the French Data Protection Act you can ask to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format (portability), and to withdraw your consent at any time (for analytics: “Cookie settings”). You can also give instructions about what happens to your data after your death.
How to exercise them
Send your request through the contact form (subject “Other”), from the e-mail address of your account if you have one. We may ask you to confirm your identity. We answer within one month; this can be extended by two months for complex requests, in which case we tell you.
Complaints
If you think we have not respected your rights, you can lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr — or with the data protection authority of the EU country where you live.
08Age
Dots for Claude is meant for adults and professionals. If you are under 15, please do not create an account.
09Changes to this policy
We will update this page when our practices change and show the new date at the top. If a change matters, we will tell you by e-mail or in the app before it applies.