Privacy Policy

1. Identity of the Data Controller

The website www.heeya.fr is published by TENSORIA,

SIREN: 988 823 258

Address: 59 rue de Ponthieu 75008 Paris

Contact: [email protected]

2. Data Collected

In connection with the creation and management of your professional account, we may collect the following data:

- Customer identity and contact details (last name, first name, company, email, phone number)

- Authentication and identification data (username, password)

- Platform usage data (history, AI assistant configuration, documents or texts provided by the customer)

- Payment data (via secure payment service providers)

3. Purposes of Processing

The data collected is processed for the following purposes:

- Creation, management, and configuration of user accounts

- Provision and management of AI assistant services

- Invoicing, payment management, and customer relationship management

- Internal analytics and continuous service improvement

- Compliance with legal and regulatory obligations

4. Recipients of Data

Your data is strictly accessible by:

- Heeya and any support personnel it may employ

- Technical service providers involved in delivering the service (hosting, AI service providers such as AWS, OpenAI, Anthropic, and payment processors)

These providers are committed to maintaining the confidentiality, security, and compliance with personal data protection regulations.

5. Transfers Outside the European Union

Some data may transit through the platforms of our AI service providers, which may be located outside the European Union. In such cases, we ensure that our partners provide adequate safeguards in accordance with applicable regulations (standard contractual clauses, adherence to the Data Privacy Framework, etc.).

6. Data Retention

Your data is retained for the duration of the contractual relationship, and thereafter archived for the legally required period for evidentiary or accounting purposes, unless an explicit deletion request is made.

7. Analytics and Statistics

Information and documents added to the platform may be used for internal statistical purposes, anonymised as early as possible, with the aim of improving our services.

8. Exercising Your Rights

In accordance with the GDPR, you have the following rights:

- Right to access, rectify, and erase your personal data

- Right to restrict or object to the processing of your data

- Right to data portability

To submit a request, write to [email protected] with the subject line "Personal Data Deletion" or specify your request. The identity of the requester will be verified before the request is processed. Deletion will be carried out within 30 days, unless legal obligations require otherwise.

9. Data Security

We implement all appropriate technical and organisational measures to ensure the security, confidentiality, and integrity of your data.

10. Policy Updates

This policy may be updated at any time. The applicable version is the one published on the website at the time of consultation.

11. Contact

For any questions regarding the management of your personal data, you may contact us at [email protected].