Privacy policy
Version in force as of . This is a working translation; the French text is authoritative.
Who is the data controller
The data controller is Cécilia CLAPSON, a sole proprietor (EI) trading as UnifAIze, 31 Poya du Moulin, 38880 Autrans-Méaudre en Vercors, France. Contact for any question about your data: c.clapson@unifaize.app.
What we process, and why
Your account (email address, name if you provide it, sessions), to identify you and give you access to your bibles. Legal basis: performance of the contract (Article 6(1)(b) GDPR).
Your bible requests (brand name, website address, language, text of the public pages read, drafted content and files produced), to draft and deliver the bible. Legal basis: performance of the contract.
Your orders (email address, company name and SIREN or RNA number, billing address, tier, amount, payment status, version of the terms accepted), to perform, invoice and account for them. Legal bases: performance of the contract and legal obligation (Article 6(1)(c)).
A free bible requested without an account (a keyed hash of the connection address and website domain, never the address in clear), to limit requests and prevent abuse. Legal basis: our legitimate interest in keeping the service available (Article 6(1)(f)).
The waitlist (your email address, collected by Clerk), to tell you about the opening and invite you to create your account. Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time by writing to the contact address.
Technical logs and cookieless audience measurement, for service security and to count visits. Legal basis: our legitimate interest.
Your messages (name, email address, subject, content, any order reference), received in our mailbox when you write to us, to reply and handle your request. Legal basis: our legitimate interest in replying; for a complaint about an order, performance of the contract. Retention: the time needed for the request, then 12 months; a complaint, until the end of the order’s guarantee period.
People named on the websites analysed. A bible may include, from the public pages of the website indicated by the customer, the name or role of a person (an executive, a team member, the author of a testimonial), and the screenshots of the top of pages may show a face. We do not look for such data: it is part of the material read. Purpose: drafting the bible ordered. Legal basis: our legitimate interest and the customer’s in describing the brand as it presents itself publicly. It is kept only within the bible, for as long as the bible is kept, and used for no other processing. A person concerned can object and ask for erasure by writing to c.clapson@unifaize.app. Informing each person individually would involve disproportionate effort (Article 14(5)(b) GDPR): this public notice takes its place.
Screenshots of the pages analysed
To observe the experience the analysed website offers, ToneID takes screenshots of the top of some of its public pages, in desktop and mobile views. These screenshots are sent to Anthropic, our language model provider, to be analysed; only the resulting observation, written as text, is used to draft the bible. We keep no screenshots; at Anthropic, they follow the conditions declared for request data, described under “Transfers outside the European Union.”
How long
Free bible requested without an account: available for 24 hours, results and hashes included, then erased.
Waitlist: until the service opens, then no more than 6 months if no account is created from the invitation; on request, erasure within one month.
Account and bibles: while the account is active; erasure on request within one month; an account with no sign-in for 3 years is erased, after an email warning.
Orders, the version of the terms accepted and the declarations made when ordering: ten years (proof of the contract and accounting obligations). Invoices: ten years (Article L123-22 of the French Commercial Code).
Messages: 12 months after the request is handled. Technical logs: 6 months. Audience measurement: no more than 25 months.
Who has access
Your data is neither sold nor rented. Each organisation is isolated from the others at database level and has a single member. The providers below process it on our behalf, as processors (Article 28 GDPR), only for the service indicated:
IONOS SE (Germany) — Production hosting: a server located in Germany that runs the website, the database, the bible files and the self-hosted tools. Data: all service data, stored on that server.
Clerk, Inc. (United States) — Accounts, sign-in, organisations and the waitlist. Data: email address, name if you provide it, session data.
Anthropic Ireland, Limited (Ireland for the contract, United States for processing) — Language model that drafts the bible and analyses the page screenshots; request data is processed by its parent company, Anthropic, PBC, with a declared retention (see “Transfers outside the European Union”); training on inputs and outputs disabled. Data: the brand name, the text of the public pages read, screenshots of the top of some of those pages (desktop and mobile), the drafting instructions.
Jina AI GmbH (Germany, the company’s seat) — Reading the public pages of the website you indicate; a company of the Elastic group. Data: the addresses of the public pages to read.
Mollie B.V. (Netherlands) — Online payment, on its own secure page. This site never receives your card details. As a data controller, this provider processes the data it receives for its own legal obligations, under its own privacy statement. Data: amount, order reference, email address; payment details are entered on Mollie’s page.
Transfers outside the European Union
Two providers process data in the United States.
Clerk, Inc.: this transfer relies on the European Commission’s adequacy decision for companies certified under the EU–US Data Privacy Framework, in which Clerk participates, and otherwise on the standard contractual clauses.
Anthropic Ireland, Limited: request data is processed and stored in the United States by its parent company, Anthropic, PBC, under the European Commission’s standard contractual clauses (Article 46 GDPR) provided for in its data processing agreement. It is kept for 30 days, subject to exceptions declared by Anthropic (content flagged for abuse, legal obligations), and is not used to train its models.
You can obtain a copy of these safeguards by writing to c.clapson@unifaize.app.
Model training
We do not use your content to train models, and our language model provider is not permitted to use it to train its own.
Automated decisions and security
The bible is drafted automatically, but no decision producing legal effects concerning you is taken on that basis alone (Article 22 GDPR).
Security measures (organisation isolation, short-lived signed download links, secrets in a dedicated vault) are described in the last section of this document, “File security and reporting a vulnerability”.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability (Articles 15 to 22 GDPR), and the right to give instructions on what happens to your data after your death (Article 85 of the French Data Protection Act). To exercise them, write to c.clapson@unifaize.app; we reply within one month, which may be extended by two months for a complex request, in which case we tell you within the first month. Upon your death, your data is erased when the account is closed, unless you have given other instructions; you can name a person to whom it should be passed by writing to us.
You may lodge a complaint with the CNIL, the French data protection authority, online at www.cnil.fr or by post.
File security and reporting a vulnerability
Files are downloaded through a signed link, valid for 15 minutes, created on each click.
A security flaw, unusual behaviour: write to c.clapson@unifaize.app, describing what you observed.
Choose the subject of your message. The form prepares an email in your email program; this website records nothing: you review the message, then send it yourself. Contact us