Privacy Policy

1. Data Controller

Arpany Technologies, a société par actions simplifiée registered in France under SIREN 102 205 135, with share capital of 1 000 € and VAT number FR66 102 205 135, with registered office at 38 rue des Mathurins, 75008 Paris, France, is the data controller for your personal data. For any privacy-related inquiry, contact us at privacy@arpanyresearch.com.

2. Data We Collect and Why

We collect the following categories of personal data:

(a) Account data: your email address, authentication credentials, and subscription and billing status.

(b) Interaction and conversation data: the research questions and messages you send to the AI Agent, and the conversation history we store so that you can revisit your past threads. When you upload a document (PDF or Word) for analysis, its text is processed to answer your request and transmitted to our AI processor (see Section 6); we do not permanently store the full text of uploaded documents — only your messages and the resulting conversation history, which you can delete at any time.

(c) Usage data: feature usage, quota counters, feedback ratings, and technical information (such as device, browser, and IP address) used to operate, secure, and improve the Service.

(d) Payment data: processed by our payment provider; we never store your full card number.

3. How We Use Your Data

We use your personal data to: (a) provide, operate, and maintain the Service; (b) process subscription payments and manage your account; (c) communicate with you regarding your account and Service updates; (d) monitor and improve the quality of our AI-powered features through feedback ratings; (e) prevent fraud and abuse; (f) comply with legal obligations including tax and accounting requirements.

4. Anonymised Research Data and Future Data Products

As part of our business model, we may retain and analyse anonymised, aggregated data derived from research queries (topics, scientific fields, usage patterns), with all directly identifying information permanently removed. We may use this data to: (a) improve AI feature relevance and accuracy; (b) develop research trend analytics; (c) develop article and content recommendation features; (d) develop derivative data products or research insights for third parties, provided such data cannot reasonably be used to re-identify any individual. Where anonymisation cannot be guaranteed, or where applicable law requires explicit consent for secondary use, we will request your separate, opt-in consent before including your data in any such initiative. You may withdraw that consent at any time without affecting your ability to use the core Service. We will never sell personal data that directly identifies you to third parties for their own independent marketing purposes without your explicit consent.

5. Legal Basis for Processing (GDPR)

We rely on: (a) Contract performance, for data necessary to provide the Service; (b) Legitimate interest, for fraud prevention, Service improvement, and aggregated analytics; (c) Consent, for non-essential cookies and optional secondary data use; (d) Legal obligation, for tax and regulatory compliance.

6. Data Sharing and Third-Party Processors

We share data with: (a) Supabase (database and authentication); (b) OpenAI (AI processing — data not used to train OpenAI models by default); (c) Stripe, Inc. (payment processing); (d) Vercel Inc. (application hosting); (e) Resend (transactional email). We do not sell personal data to data brokers or unrelated third parties.

7. International Data Transfers

Some providers may process data outside the EEA. We ensure appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, in accordance with GDPR Chapter V.

8. Data Retention

We retain personal data as long as your account is active. Your conversation history is retained while your account is active, and you can delete any conversation (and its messages) at any time directly from the application. Upon account deletion, we will delete or irreversibly anonymise your data within thirty (30) days, except where longer retention is required by law (e.g., invoicing records retained for ten (10) years under French commercial law). Accounts inactive for twenty-four (24) consecutive months may be closed after thirty (30) days' prior email notice. Backup copies may persist for up to thirty (30) additional days before permanent deletion.

9. Your Rights (GDPR)

If you are located in the EEA or United Kingdom, you have the following rights regarding your personal data: To exercise these rights, contact us at privacy@arpanyresearch.com. We will respond within one (1) month as required by GDPR Article 12. Most rights can also be exercised directly from your Profile page.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Service and analyse usage. Non-essential cookies are only set after obtaining your consent via our cookie consent banner, in compliance with the ePrivacy Directive and GDPR. You can manage cookie preferences through the settings link in our website footer.

11. Data Security

We implement appropriate technical and organisational measures including TLS encryption, encryption at rest, row-level database security, and restricted access controls. No method of transmission or storage is completely secure.

12. Children's Privacy

The Service is not directed to individuals under 16. If we become aware that a user is under 16, we will immediately suspend their account and delete their data.

13. Changes to This Privacy Policy

Material changes will be notified via email or in-app notice at least fifteen (15) days before taking effect.

14. Supervisory Authority

You have the right to lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr, or with the supervisory authority of your country of residence within the EU.

15. Contact Us

For privacy-related questions, contact us at privacy@arpanyresearch.com. Arpany Technologies — SIREN 102 205 135 — Capital social : 1 000 € — N° TVA : FR66 102 205 135 — 38 rue des Mathurins, 75008 Paris, France