Last updated: April 3, 2026
Rousselot Pailley Advisory LLC (“we”, “us”, “our”) operates the website yrp.me and associated messaging services. This policy explains how we collect, use, and protect your personal information.
Information We Collect
We collect information you voluntarily provide when you use our services, including: your name, email address, phone number (including WhatsApp number), LinkedIn profile URL, professional title, company name, and country of residence. When you complete our innovation diagnostic, we also collect your responses and the resulting scores.
How We Use Your Information
We use the information you provide to deliver requested content (diagnostic reports, newsletter issues, book previews), communicate with you through your preferred channel (email, WhatsApp, LinkedIn, or other messaging platforms), personalize the content and recommendations we share with you, manage speaker booking inquiries, and improve our services. We do not sell your personal data to third parties.
Messaging Services
If you provide your WhatsApp number, we may send you messages through the WhatsApp Business Platform operated by Meta Platforms, Inc. Messages may include content you requested (diagnostic reports, newsletters), updates related to topics you expressed interest in, and responses to your inquiries. You can opt out of WhatsApp messages at any time by replying “STOP” to any message or by contacting us at yann@yrp.me.
Data Storage and Security
Your data is stored securely using Supabase (hosted on AWS infrastructure) with row-level security policies. Email delivery is handled through Amazon Simple Email Service (SES). We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, or destruction.
Third-Party Services
We use the following third-party services to operate: Supabase (database hosting), Amazon Web Services (email delivery), Meta Platforms (WhatsApp Business messaging), Vercel (website hosting), and Google Workspace (calendar and communication). Each of these providers has their own privacy policies governing how they handle data.
Your Rights
You have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, withdraw consent for messaging at any time, and request a copy of your data in a portable format. To exercise any of these rights, contact us at yann@yrp.me.
Research Participation
If you choose to take part in Yann Rousselot-Pailley’s doctoral research study at UCAM Universidad Católica San Antonio de Murcia (programme: Computer Science / AI-Augmented Organizational Memory, supervisor: Dr. Vimala Sanjeevkumar), the following additional terms apply.
Legal basis & jurisdictions
Processing is based on your explicit, informed consent under EU GDPR Art. 6(1)(a) and Art. 9(2)(a) and the Saudi Personal Data Protection Law (PDPL, Royal Decree M/19 of 9/2/1443H). Because most participants are based in the Kingdom of Saudi Arabia and the principal investigator is a French citizen working under a Spanish university programme, both regimes apply concurrently. The stricter standard governs in case of conflict.
Data controller & joint controllers
Principal Investigator / Data Controller: Yann Rousselot-Pailley, doctoral candidate, UCAM Murcia. Contact: yann@yrp.me. Joint Controller: UCAM Murcia (Faculty of Computer Science). The supervisor (Dr. Vimala Sanjeevkumar) has supervisory access to anonymised research data only.
Categories of personal data collected
Identification (full name, professional email), professional context (organisation, role, sector, country, years of experience), and research data (questionnaire responses, optional interview transcripts, optional voice recordings). No special-category data (race, religion, health, political opinions) is intentionally collected. Participants are asked not to disclose confidential, classified, or trade-secret information.
Purpose & lawful use
Data is processed solely for: (a) the doctoral thesis manuscript, (b) peer-reviewed academic publications derived from it, (c) anonymised teaching and conference materials, and (d) the forthcoming book The Innovator’s Compass. Data is never sold, shared with advertising platforms, used for marketing, or transferred to KPMG or any commercial entity.
Anonymisation & publication
Identifying information is removed before any analysis is shared outside the principal investigator and the supervisor. In the published thesis and any derived works, participants are referenced only as anonymised role-and-sector descriptors (e.g., “a senior R&D director at a Saudi RDI organisation”) unless explicit named-attribution consent has been granted in writing.
Storage, retention & security
Raw data is stored on encrypted EU-region servers (Supabase, eu-central-1) with row-level security enforcing principal-investigator-only access. Backups are encrypted at rest. Retention: raw identifiable data is destroyed within 12 months after the thesis defence; fully anonymised datasets may be retained indefinitely for reproducibility under FAIR data principles. Cross-border transfers (Saudi Arabia → EU) are conducted under PDPL Art. 29 with explicit consent.
Your rights as a participant
You have the right to: (1) access your data, (2) correct inaccurate data, (3) request erasure, (4) restrict processing, (5) data portability, (6) withdraw consent at any time without justification and without penalty, and (7) lodge a complaint with the Spanish AEPD, the French CNIL, or the Saudi Data & AI Authority (SDAIA). To exercise any right, email yann@yrp.me with subject “Research Data Request”. Withdrawal is processed within 30 days.
Ethical approval
The protocol has been submitted to the UCAM Murcia Research Ethics Committee. The approval reference will be published on the research page upon issuance. No data collection from new participants will occur prior to approval. Participants are entitled to review the full study documents before consenting: the Participant Information Sheet (English / العربية) and the Consent Form (English / العربية).
Separation from other yrp.me activities
The Innovation Maturity Diagnostic and the Innovation Meridian questionnaire are not part of the doctoral research and are not covered by the academic ethics protocol. Data submitted through those tools is governed by the general sections of this Privacy Policy.
Cookies
Our website uses essential cookies required for site functionality. We do not use advertising or tracking cookies.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.
Contact
Rousselot Pailley Advisory LLC
Yann Rousselot-Pailley
Email: yann@yrp.me
Website: yrp.me