English translation. This page is a translation provided for information only. The French version at /rgpd is the reference text.
The data controller is Intelligence Artificielle Générale SAS (“LibertAI”), 76 Promenade des Anglais, 94210 Saint-Maur-des-Fossés, France — SIREN 985 392 356.
LibertAI is a European company, subject to the GDPR for all of its processing: website, chat, API, console, agents and related services. Data protection is not a layer added afterwards: it is the product. Our technical choices — no content retention, no training on your data, verifiable infrastructure — follow directly from the principles of minimisation and data protection by design (Art. 25 GDPR).
In practice, here is what we process and what we do not. This summary mirrors the privacy policy, which is the authoritative text.
| We process | We do not process |
|---|---|
| Account, email or wallet address, sessions and API keys | The content of your conversations and requests, in a database |
| Usage counters: tokens, images, model called, timestamp | Your bank card data, which never passes through our servers |
| Payment references and accounting records | Advertising profiling or a browsing history sold on |
| Limited technical logs, for security and diagnostics | An IP address linked to an account in our databases |
IP addresses are used transiently, in memory, to limit abuse and determine the display currency. Like any online service, our servers and load balancers produce technical logs that may contain IP addresses; these are retained for a limited period, solely for security and diagnostic purposes.
Each processing operation relies on an identified legal basis under Article 6 of the GDPR. No processing relies on consent where the service cannot work without it: in that case, the basis is performance of the contract.
| Purpose | Legal basis |
|---|---|
| Account creation and management, provision of the service | Performance of the contract — Art. 6(1)(b) |
| Billing, subscriptions, accounting | Performance of the contract and legal obligation — Art. 6(1)(b) and 6(1)(c) |
| Security, abuse prevention, rate limiting | Legitimate interest — Art. 6(1)(f) |
| Aggregated audience measurement | Legitimate interest — Art. 6(1)(f), without individual profiling |
Retention periods, recipients and the detail of the data processed are described in theprivacy policy.
You have the following rights, across all processing:
To exercise these rights, write to privacy@libertai.io. We respond within one month, extendable by two months for complex requests. We may ask you for the information needed to verify that the request does come from you.
Certain data cannot be erased: accounting records, which the law requires us to retain, and transactions recorded on a public blockchain, which are technically immutable.
We use identified providers, each for a specific purpose and acting on our instructions. Hosting and confidential computing infrastructure are provided by Aleph.IM SAS, established in Paris. The other providers — payments, sign-in via Google or GitHub, email delivery, geolocation for currency and VAT, self-hosted audience measurement — are listed in theprivacy policy.
None of these providers uses your data for advertising. When your browser contacts one of them, that service technically receives your IP address, as with any resource loaded from a third-party domain.
Some providers are established outside the European Union, in particular in the United States. These transfers are covered by the appropriate safeguards provided for in Chapter V of the GDPR, in particular the European Commission's standard contractual clauses.
Crypto-asset payments are recorded on public blockchains, accessible worldwide and immutable by nature. This publicity is inherent to the technology and beyond our control.
Minimisation is our first security measure: less data retained means less data to protect. How attestation works is described in thetrust model.
The website and applications set only trackers strictly necessary for the service: session, protection of sign-in via Google or GitHub, routing continuity and the state of the side panel. These trackers do not require consent.
Audience measurement is provided by a self-hosted solution, without advertising cookies and without cross-site tracking. The data is strictly statistical, is not cross-referenced with other processing and is not shared with any third party. It therefore falls within the consent exemption provided by the CNIL for audience measurement. The list of cookies is in theprivacy policy.
No advertising cookies, no social network pixels and no third-party behavioural trackers are set. That is why the website shows no consent banner.
For business customers, LibertAI contracts as a European company and issues a European invoice. On request, we provide:
To start these conversations: contact@libertai.io.
If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with theCommission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr.
Related documents: privacy policy,legal notices, terms of sale.
This page may be updated to reflect a change in our processing or in the regulations. The date at the top indicates the latest revision; in the event of a substantial change, users with an account will be informed.