Privacy policy

DeepAgenticAI, sole proprietorship, 10 Impasse Pierre Piquet, 84140 Avignon, France. Contact: [email protected].

Given the size of the business, no data protection officer is required: requests are handled directly by the publication director.

For the content of the documents you upload or import, you are the data controller; we act as a processor, on your instructions only.

• Account: email address, first and last name of invited members, password (stored as a non-reversible hash), Google profile picture if you sign in with Google.
• Documents: the files uploaded or imported, their text and their search index.
• Connected sources: access tokens for the services you connect (Google Drive, Notion, Slack…), the list of items seen at the provider and those you import.
• Messaging apps: if you connect Slack, Microsoft Teams or Telegram, the identifier of the thread where the question is asked.
• Usage: questions, answers, votes, credit movements, activity log of the workspace.
• Payment: handled by Stripe; we never see your card number.
• Technical data: IP address, timestamps, error logs.

• Providing the service: account, indexing, answers, connected sources. Legal basis: performance of the contract.
• Billing and bookkeeping. Legal basis: legal obligation.
• Improving answer quality from votes and question traces. Legal basis: legitimate interest; you can object by writing to [email protected].
• Security: activity log, error alerts, abuse prevention. Legal basis: legitimate interest.
• Audience measurement of the website and the app. Legal basis: legitimate interest.

• Documents, conversations and connected sources: as long as the account exists, or until you delete them (Account → Delete data).
• Account: until it is deleted, which you trigger yourself from Account.
• Activity log (who did what in the workspace, and when): kept after the account is deleted, for security and evidence purposes.
• Invoices and accounting records: 10 years (article L.123-22 of the French Commercial Code), at Stripe.

The sources and messaging apps you connect (Google Drive, Notion, Slack, Microsoft Teams, Telegram…) only receive our calls if you turn them on, and only for the items you choose.

We don't transfer, rent or sell any data.

Some providers are established in the United States. These transfers rely on the European Commission's standard contractual clauses and, for certified providers, on the Data Privacy Framework. Your documents, their index and the AI models stay in the European Union.

Access, rectification, erasure, restriction, portability, objection and post-mortem instructions: write to [email protected]. We answer within 30 days at most. You can also delete your data or your account yourself from Account.

If you believe your rights aren't respected, you can lodge a complaint with the CNIL (cnil.fr), the French data protection authority.

• Strictly necessary: the session cookie (staying logged in, 30 days) and the CSRF protection cookie. The light or dark theme, the language and the sidebar state are remembered in your browser. None of this is used for measurement.
• Google Analytics (GA4): audience measurement, pages viewed and traffic sources. Set by Google. You can block it from your browser settings or a dedicated extension.

No advertising cookies.