Privacy Policy

Version of September 20, 2026

Highlighted passages identify either information yet to be confirmed or processing or features that are not yet applied.

1. Our Commitment

Instanct is a real-time professional networking platform. It allows people present in the same location, establishment, or event to voluntarily make themselves visible, discover relevant professional profiles, and connect.

Privacy protection is built into how Instanct operates. In particular, you retain control over:

• the information displayed on your profile;

• your presence in a space;

• your visibility on the map;

• who can contact you;

• the use of your location;

• your connections and conversations;

• the deletion of your data and account.

Instanct does not sell your personal data.

2. Data Controller

The data controller is:

DTA INTERNATIONAL

Société à responsabilité limitée (sans autre indication)

Registered office: 32 RUE D'EGUISON 13010 MARSEILLE

RCS/SIREN: 981609993

Data protection email: support@instanct.com

In this policy, the terms "Instanct", "we", and "our" refer to this company.

3. Services Covered

This policy applies:

• to the Instanct mobile application;

• to the Instanct website;

• to map, networking, messaging, and appointment scheduling features.

This policy also mentions, for information purposes, Instanct Open public spaces, Instanct Spaces private, semi-public, or VIP spaces, spaces created for hotels, lounges, coworkings, trade shows, congresses, business clubs, campuses, or companies, as well as beta versions distributed via TestFlight. These services are not yet open. Processing that exists solely for these spaces does not apply until put into production.

4. Data You Provide to Us

4.1 Account Creation

We may collect:

• your first and last name;

• your email address;

• your phone number, when requested;

• your password in a secure form;

• your language;

• your profile picture;

• your user ID.

4.2 Professional Profile

You may voluntarily add:

• your job title;

• your company or organization;

• your industry / sector;

• your skills and areas of expertise;

• a professional bio / presentation;

• your professional contact details;

• your professional links;

• your areas of interest;

• your networking goals;

• your availability;

• languages you speak.

You must not publish sensitive or confidential information that you do not wish to make visible to other authorized users.

4.3 Networking Goals

You can indicate the reason why you wish to be contacted, for example:

• seeking clients;

• meeting partners;

• finding investors;

• recruiting or seeking career opportunities;

• offering or seeking expertise;

• expanding your network;

• organizing a meeting.

This information is used to facilitate relevant professional connections.

4.4 Communications

We process information related to:

• connection requests;

• acceptances and rejections;

• professional contacts created;

• messages exchanged;

• appointments organized;

• blocked users;

• reports submitted to our team.

The content of private conversations is not shared with organizers, hotels, or other partners, except when a user chooses to share it or access is essential to investigate a report, ensure service security, or comply with a legal obligation.

5. Location and Instanct Map

5.1 General Operation

The Instanct map allows viewing venues, events, professional spaces, and, when users have voluntarily authorized it, their presence in an area.

The map is not intended to provide continuous tracking of movements.

Depending on the features used and authorizations granted, Instanct may process:

• an approximate location inferred from the IP address;

• the venue or event joined;

• a manually selected area;

• the device position provided by the operating system;

• a precise GPS position when the user expressly authorizes it;

• the date, time, and duration of presence in a space;

• the point or area displayed on the map.

5.2 Voluntary Activation

User visibility on the map must be enabled voluntarily.

Authorization given to the operating system does not automatically mean position is visible to other users. Visibility on Instanct also depends on settings chosen within the app.

Users can in particular:

• appear only in a venue or general area;

• authorize a more precise position when offered;

• limit visibility to participants in the same space;

• deactivate their presence;

• leave a venue or event;

• remove location authorization in phone settings.

5.3 Precise Location

When precise location is required for a feature, Instanct asks for user permission before accessing GPS data.

Unless otherwise clearly presented to the user:

• Instanct does not continuously track movements;

• Instanct does not use location in the background;

• position is not publicly accessible on the internet;

• position is not sold to advertisers;

• partners do not receive detailed movement history;

• an exact position is not communicated to other users when a venue-level or area-level indication is sufficient.

If a background location feature is added later, it will be subject to specific information and dedicated authorization. This feature is not active.

5.4 Temporary Presence

Presence on the map is designed as temporary information.

It may end:

• when the user deactivates presence;

• when voluntarily leaving the space;

• upon expiration of the selected session;

• upon event closure;

• after a period of inactivity.

Instanct may temporarily retain certain technical data related to the session to ensure security, prevent abuse, and resolve incidents. This data must not be used to reconstruct user movements over time.

5.5 Security and Vigilance

Even when a position is displayed at a venue or area level, it may reveal that a person is inside an establishment or attending an event.

Each user must therefore check their settings before activating visibility and avoid displaying position when they believe it could pose a risk.

Other users may take screenshots or retain information seen in the application. Instanct cannot technically prevent all uses made outside the platform.

6. Data from Organizers and Partners

When a user attends a trade show, congress, professional event, or accesses a partner space, the organizer may transmit certain information to us, for example:

• first and last name;

• professional email address;

• company and job title;

• badge number or registration ID;

• participant category;

• selected program or sessions;

• access rights to certain areas;

• participant or exhibitor lists;

• scheduled appointments.

This processing is not yet implemented. It will apply only when an organizer effectively transmits data to Instanct and has informed participants of this transmission.

7. Roles of Instanct and Organizers

7.1 Instanct as Data Controller

Instanct generally acts as data controller for:

• creation and management of the global account;

• the Instanct profile;

• connections and messaging;

• privacy settings;

• platform security;

• general map operation;

• service improvement;

• user rights management.

7.2 Instanct as Data Processor

Instanct may act as data processor when an organizer or partner asks us to process data exclusively to administer their event or space. This situation is not yet in production. In this case, the organizer or partner will determine processing purposes, and requests specifically concerning data entrusted to us by them may need to be addressed to them.

7.3 Organizer as Separate Controller

An organizer may use certain data for its own purposes, such as managing registrations, controlling access, organizing meetings, analyzing attendance, communicating with participants, and fulfilling security obligations. Such processing will fall under the organizer's privacy policy. It does not apply while no partner space is open.

8. Automatically Collected Data

When using Instanct, we may collect:

• IP address;

• device model;

• operating system;

• app version;

• language and time zone;

• technical identifiers;

• connection dates and times;

• screens and features used;

• error and crash reports;

• security logs;

• permission settings communicated by the device.

QR codes or invitations used to join an event space are not yet collected.

We limit this collection to information necessary for operation, security, statistics, and service improvement.

9. How We Use Your Data

We use data to:

• create and administer your account;

• display your profile according to your settings;

• allow you to join a venue or event;

• display your voluntary presence on the map;

• suggest profiles matching your criteria;

• facilitate connections and appointments;

• provide messaging;

• send notifications;

• personalize your experience;

• compile aggregated statistics;

• detect fake accounts, fraud, and abusive behavior;

• respond to support requests;

• improve features;

• comply with legal obligations.

Administration of partner spaces is not yet active.

Instanct does not use the content of your private conversations to display targeted advertising.

Instanct does not use your private conversations or precise GPS data to train artificial intelligence systems without prior notification and an appropriate legal basis.

10. Legal Bases

Processing relies, depending on the case, on:

• contract performance, to provide the account, profile, connections, messaging, and requested features;

• consent, notably for precise location, certain notifications, device contacts, or commercial communications;

• legitimate interest, to secure the service, prevent fraud, improve Instanct, and generate aggregated statistics;

• legal obligation, when we must retain or disclose certain information.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Access to phone contacts and commercial communications are not yet offered. Corresponding consent is therefore not collected to date.

11. Information Visibility

Depending on your settings and the space joined, other users can see:

• your name and photo;

• your job title and company;

• your professional bio;

• your skills;

• your goals;

• your availability;

• your presence in a venue or area;

• your available appointment slots.

Your email address, phone number, exact GPS position, and private messages are not made visible unless expressly authorized or shared by you.

12. Controlling Your Information

You can in particular:

• edit your profile;

• hide certain information;

• enable or disable presence;

• control your visibility on the map;

• reject or accept a connection;

• block and report a user;

• turn off certain notifications;

• revoke location access;

• leave a space;

• request a copy of your data;

• delete your account.

Revoking permission may prevent certain features from working without preventing the use of other available functions.

13. Information Accessible to Partners

Partners and organizers may receive information necessary for managing their space as well as statistics, such as number of active participants, participation rate, connection volume, appointment count, general professional goal categories, peak periods and areas, and feature usage. These transmissions are not yet conducted.

When implemented, statistics will, as far as possible, be aggregated or anonymized. Partners will not receive private conversation content, passwords, precise GPS position, detailed movement history, or unshared private contact details.

14. Other Recipients

Data may be processed by:

• authorized Instanct personnel;

• other users according to your settings;

• hosting providers;

• authentication providers;

• mapping services;

• notification providers;

• diagnostic and audience measurement tools;

• support and security providers;

• Apple or Google for app distribution;

• competent authorities when required by law.

Authorized administrators of a partner space do not yet receive data, as no partner space is currently open.

Our processors may only use data in accordance with our contractual instructions.

15. Mapping Service

The map may rely on one or more external providers.

Providers currently planned:

• Apple Maps — https://www.apple.com/legal/privacy/data/en/apple-maps/

• Google Maps — https://policies.google.com/privacy

When the map is loaded, these providers may receive technical data such as IP address, device type, displayed area, or information necessary to deliver the map.

16. Contacts and Calendar

Instanct does not currently access device contacts or calendar. If offered, we will explain what data is imported, for what purpose, retention duration, and how to delete imported information. Refusing access will not prevent manual networking features from working.

17. Retention Periods

We apply the following retention periods:

• Account and profile — While the account is in use

• Inactive account — Deletion or anonymization after 3 years of inactivity

• Visible map presence — Duration of session or event

• Precise position linked to a session — Deletion or conversion to non-precise data after session end, except security incidents

• Technical location logs — Maximum 30 days, except incidents or legal obligation

• Professional connections — Until deleted by user or account deletion

• Messages — Until deleted by user or account deletion

• Security logs — Maximum 12 months

• Support requests — Up to 3 years after closure

The following durations do not yet apply as corresponding processing is not in production:

• Event data — Duration defined with organizer, then deletion or anonymization

• Billing data — 10 years

• Commercial prospecting — 3 years after last active contact

Data may be retained longer when justified by a legal obligation, litigation, serious report, or security requirement.

Backup copies are progressively deleted according to our technical cycles.

18. Hosting and International Transfers

Data is hosted by:

OVH Groupe SA

France

OVHCLOUD, 2 RUE KELLERMANN 59100 ROUBAIX

We prioritize hosting within the European Union or European Economic Area.

When data is transferred to a country outside this area, we use a recognized mechanism such as an adequacy decision or European Commission standard contractual clauses.

19. Security

We implement appropriate measures, including:

• encrypted communications;

• password protection;

• access control;

• logging of sensitive access;

• backups;

• incident management procedures;

• processor monitoring;

• blocking and reporting mechanisms.

Separation of partner spaces is not yet operational, as these spaces are not open.

No digital service can guarantee absolute security. You must protect your credentials and promptly report suspicious activity.

20. No Data Selling or Behavioral Advertising

Instanct does not sell or rent your personal data.

As of the date of this policy, Instanct does not use your precise position, private messages, or networking activity to track you across third-party apps and websites.

If an ad model or cross-app tracking system were introduced, this policy and disclosures to Apple and Google would be updated beforehand, and required consents would be collected.

21. Minor Users

Instanct is intended for professionals aged at least 18 years old.

We do not knowingly collect data from minors. When an account belonging to a minor is identified, it may be suspended and deleted.

22. Your Rights

You can request:

• access to your data;

• rectification;

• erasure;

• restriction of processing;

• data portability;

• objection to processing;

• withdrawal of consent;

• a copy of your data;

• information on international transfers;

• directives regarding your data after your death.

You can exercise your rights within the app or by writing to:

support@instanct.com

We may request proof of identity only in case of reasonable doubt.

We normally respond within one month, subject to regulatory extensions.

You can also lodge a complaint with the CNIL:

Commission Nationale de l'Informatique et des Libertés

3 Place de Fontenoy

TSA 80715

75334 Paris Cedex 07

www.cnil.fr

23. Account Deletion

You can request account deletion directly from the app or at support@instanct.com.

Deletion results in:

• profile deactivation;

• end of map visibility;

• removal from active spaces;

• deletion or anonymization of personal data;

• removal of connections and content per applicable rules.

Certain information may be temporarily retained to comply with legal obligations, investigate reports, or defend legal rights.

24. Changes to This Policy

We may update this policy as features, providers, or regulations evolve.

In the event of material changes, we will notify you in the application, by email, or through another appropriate medium before taking effect.

25. Contact Us

For any questions regarding your data:

Instanct – Data Protection

DTA INTERNATIONAL

32 RUE D'EGUISON 13010 MARSEILLE

support@instanct.com