Privacy policy

AgenIA is the controller for account management and billing data (credentials, contacts, subscription). Its full details appear in the legal notice.

For the data you entrust to us within the service (content entered, documents uploaded, processing results), we act as a processor within the meaning of article 28 of the GDPR: you remain the controller and the owner, and we process it only to provide you with the service, on your instructions.

Contact for any question about data: contact@agenia.pro

We collect no sensitive data within the meaning of article 9 of the GDPR, and carry out no profiling and no solely automated decision-making producing legal effects concerning you.

When you request processing by artificial intelligence — a summary or analysis of some content, a question to online help —, the content concerned is sent to an artificial intelligence service (Anthropic). This processing takes place only at your request, and is necessary to provide the feature requested.

This content is not used to train AI models. We recommend that it contain no personal data that is not needed, and no sensitive data.

The results produced by AI may contain errors: it is for you to check them (see article 11 of the Terms).

Your data is neither sold, rented nor transferred to third parties for commercial purposes. It is accessible to the members you invite into your organisation, and to the following technical sub-processors:

Transfers outside the European Union are governed by the European Commission's Standard Contractual Clauses. Any change to this list is notified to you.

• Account and business data: throughout the subscription, then 12 months after its termination (so you can come back without loss), before permanent deletion.
• Immediate deletion possible at any time from “Settings” — the operation is irreversible.
• Subscription invoices and accounting records: 10 years, pursuant to article L.123-22 of the French Commercial Code.
• Technical logs: 12 months maximum.
• Activity log for internal accounts: 12 months. This log concerns only the publisher's own team accounts, never customer accounts.
• Newsletter subscription: 3 years from sign-up, unless you unsubscribe sooner — write to contact@agenia.pro.

The following measures are in place:

• encryption in transit (HTTPS/TLS) and at rest;
• strict separation between organisations at database level (Row-Level Security): each customer accesses only its own data;
• passwords stored as non-reversible hashes;
• files stored in a private space that cannot be listed publicly;
• access to production data limited to the people strictly required.

In the event of a data breach likely to create a risk to your rights, we will notify the CNIL within 72 hours and inform you as soon as possible.

The service uses no advertising cookies and no third-party analytics trackers. Only strictly necessary cookies are set:

• authentication cookies (Supabase), to keep your session signed in;
• language cookie (documeo_langue), which remembers the language chosen in the signed-in area, lasting 365 days;
• demonstration cookie (documeo_demo), set only if you view the demo, lasting 7 days;
• demo access cookie (documeo_acces), set when you leave your email to see it, lasting 180 days: it saves asking you again;
• plan cookie (documeo_offre), set when you choose a plan on the pricing page, lasting 15 days: it carries it through to your subscription;
• discount cookie (documeo_code), set only if you claim the scratch-card discount, lasting 30 days: it carries your code to the subscription screen;
• browser local storage, never sent to the server: your display preferences (documeo_theme, documeo_nav_replie, documeo_menu_icones), the draft of your sign-up without email or password (documeo-inscription), and the scratch-card memory (documeo-ticket) — plus, for the life of a tab, the email you left on it (documeo-ticket-email), deleted as soon as it has pre-filled the sign-up form.

As these cookies are essential to the operation of the service, they do not require your prior consent. You may delete them at any time through your browser settings — signing in to the service will then no longer be possible.

We count page views on our public site with our own tool, with no cookie and no visitor identifier: no profile is built, and two visits by the same person cannot be linked. What is recorded is the address of the page viewed, the language, the site you arrived from, and the country and city our host derives from your connection. Your IP address is never stored.

• audience measurement: legitimate interest in knowing how much the site is visited, kept for 13 months;
• sign-in log: legitimate interest in account security — email address, date, country and city of each session opening, kept for 13 months;
• journey within the application: legitimate interest in improving the service and helping you when you are stuck — for each signed-in person, the screens opened in the customer area, in order, with their date and time. Only the screen is kept (“Cases”, “a case record”), never what it displayed, nor your IP address, nor your browser; no cookie is added. This data is only viewed by the publisher. Kept for 3 months.

The sign-in log and the journey within the application are deleted along with your account when you exercise your right to erasure. You can also object to the tracking of your journey by writing to us: it stops for your account, with no effect on the service.

You have rights of access, rectification, erasure, restriction, objection and portability, as well as the right to give directions as to what happens to your data after your death.

Two of these rights are exercised directly from the application, under “Settings”: the full export of your data in a structured, machine-readable format (portability), and the permanent deletion of your account and your data (erasure).

For any other right, write to contact@agenia.pro. We reply within one month. You may also lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr).

This policy may change. Any substantial amendment is notified to you by email at least 30 days before it takes effect. The date of the last update appears at the top of the page.