🔒 Privacy Policy

1. Data Controller

The data controller for personal data is:

2. Data Collected

We only collect data necessary for our services to function:

Data Type	Purpose	Legal Basis
Identification Data Name, email, password	User account creation and management	Contract performance
Payment Data Credit card information (via Stripe)	Billing and subscription management	Contract performance
Usage Data Exchanged messages, history	AI service delivery	Legitimate interest
Technical Data IP, browser, cookies	Security and service improvement	Legitimate interest
Contact Data Support messages	Customer support	Contract performance

3. Processing Purposes

Your personal data is used for:

• 📝 Creating and managing your user account
• 💳 Billing your subscriptions and processing payments
• 🤖 Providing the artificial intelligence service
• 🔒 Ensuring platform security
• 📧 Sending you technical and commercial communications (with your consent)
• 📊 Analyzing usage to improve our services
• ⚖️ Complying with our legal obligations

4. Retention Period

Your data is retained for:

• Account data: For the duration of your subscription + 3 years after closure
• Payment data: 10 years (legal accounting requirement)
• Usage data: 12 months maximum
• Technical logs: 6 months maximum
• Contact data: 3 years after last exchange

5. Data Sharing

We never sell your data. It may be shared only with:

• Stripe: For payment processing (PCI-DSS certified processor)
• Web Hosting Provider: For secure technical hosting
• Legal Authorities: In case of legal obligation

All our subcontractors are subject to data processing agreements and guarantee an equivalent level of security.

6. International Transfers

Minerve AI is committed to hosting our European users' data on servers located within the European Union. No transfer of personal data to third countries is performed without appropriate safeguards.

7. Data Security

We implement technical and organizational security measures to protect your data:

• 🔒 SSL/TLS encryption for all communications
• 🔐 Secure password storage (bcrypt hashing)
• 🛡️ Regular and secure backups
• 👥 Restricted access to personal data
• 📋 Regular security audits
• 🚨 Incident response procedures

8. Your GDPR Rights

In accordance with the GDPR, you have the following rights:

To exercise these rights, contact us at: contact@minerve.space. We commit to responding within one month.

9. Cookies

Our site uses different types of cookies:

• Essential cookies: Necessary for the site to function
• Analytics cookies: To understand site usage (Google Analytics)
• Preference cookies: To remember your preferences

You can manage your cookie preferences through your browser settings or via our consent banner.

10. Policy Modifications

We may update this privacy policy at any time. Any changes will be published on this page with a new date. Significant changes will be notified by email.

11. Supervisory Authority

If you believe your rights are not respected, you can lodge a complaint with the Information Commissioner's Office (ICO) in the UK, or the relevant supervisory authority in your country:

🇫🇷 France: https://www.cnil.fr
🇬🇧 UK: https://ico.org.uk
🇪🇺 EU: Contact your national supervisory authority

12. DPO Contact

For any questions regarding the protection of your data, you can contact our Data Protection Officer (DPO) at: dpo@minerve.space