Privacy notice

Controller: [ENTITY NAME], [ADDRESS], [EMAIL].

What we process

• Account data: email address, API key metadata.
• Request metadata: timestamp, latency, IP address (for rate limiting and security).
• Prompts and outputs: not stored by default. Stored only when you send "options": { "retain": true } on /v1/systemone.

Why, and on what basis

• Providing the service (contract, Art. 6(1)(b) GDPR).
• Security and abuse prevention (legitimate interest, Art. 6(1)(f)).
• Retained requests: processed on your instruction; for business customers we act as processor.

How long

• Retained requests: 30 days, or earlier via DELETE /v1/retention/{request_id} (Bearer token required).
• Security logs: [N] days.

Where

Google Cloud, europe-west1 (Belgium). No transfers outside the EU/EEA. Subprocessor: Google Cloud EMEA Limited.

Cookies

No analytics or advertising cookies. Only strictly necessary ones, if any.

Your rights

Access, rectification, erasure, restriction, objection and portability: write to [EMAIL]. You can complain to the CNIL (cnil.fr).

A data processing agreement (Art. 28 GDPR) is available on request.