Privacy policy

This policy describes how UNYX processes the personal data of users of its site and its browser extension, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act. UNYX is designed to limit the movement of your data to the strict minimum.

The data controller is UNYX, whose registered office is located at 60 rue François Ier, 75008 Paris, France. For any question relating to your data, write to contact@unyx.studio.

• Account data: email address, identifier, authentication information, preferences.
• Conversations and content: the messages you exchange with the assistant and the page excerpts you explicitly submit to it for processing.
• Usage data: technical data and usage statistics (modules used, request volume, technical logs) necessary for the operation and improvement of the service.
• Billing data: managed by our payment provider; UNYX does not store your bank card numbers.

UNYX does not send the content of a page to an AI without necessity or notice, and adopts reinforced behaviour on sensitive sites (banking, payment, health).

• Provision of the service (account creation, request processing, support) — legal basis: performance of the contract.
• Billing and management of subscriptions or credits — legal basis: performance of the contract and legal obligation.
• Security, abuse prevention and proper operation — legal basis: legitimate interest.
• Product improvement and audience measurement — legal basis: legitimate interest or consent where this is required.
• Communications relating to the service — legal basis: performance of the contract or consent for optional communications.

To provide the service, UNYX uses technical providers acting as sub-processors. Each accesses only the data necessary for its service, within the framework of contractual commitments compliant with the GDPR:

• Anthropic and OpenAI — AI model providers processing the requests sent to the assistant.
• Stripe — processing of payments and billing.
• Supabase — database hosting and authentication.
• Cloudflare — site and API hosting, network security.
• Resend — sending of transactional emails.

Some of these providers may process data outside the European Union. In this case, appropriate safeguards (such as the European Commission's standard contractual clauses) govern these transfers.

Account data is kept as long as the account is active, then deleted or anonymised within a reasonable period after its closure. Conversations are kept for as long as necessary for the service and may be deleted at your request. Billing data is kept for the period imposed by legal and accounting obligations.

In accordance with the GDPR, you have the following rights over your data:

• Right of access to your personal data.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten").
• Right to object and right to restriction of processing.
• Right to portability of your data in a reusable format.
• Right to withdraw your consent at any time, without retroactive effect.

You can at any time export your data or request the deletion of your account and associated content, from your settings or by writing to contact@unyx.studio. Deletion results in the erasure of data that is not subject to a legal retention obligation.

To exercise your rights or for any question relating to the protection of your data, contact UNYX's data officer at contact@unyx.studio. You also have the right to lodge a complaint with the French data protection authority (CNIL), www.cnil.fr.