Effective Date: 2024/10/06
At MahoutAI, we are committed to protecting your privacy and ensuring that your personal data is handled in accordance with applicable laws and regulations, including the General Data Protection Regulation (GDPR) (EU) 2016/679.
This Privacy Policy explains how we collect, use, and protect the personal information of users interacting with our blog and chatbot features. By using our website, you agree to the collection and use of your data as described in this policy.
1. Data Controller
The data controller responsible for your personal information is MahoutAI, located in France. If you have any questions or concerns about our privacy practices, you can contact us at contact@mahoutai.com.
2. Types of Data Collected
We collect and process the following types of personal data when you interact with our website:
a. Blog Comments
- Personal Information: When you leave a comment on our blog, we collect your name (or pseudonym), email address, and any other information you choose to provide in the comment.
- Data Retention: Comments and associated data are stored indefinitely unless you request their deletion. We retain this information to display your comment and maintain the conversation thread.
b. Chatbot Interactions
- Personal Information: When interacting with our chatbot, we may collect your name, email (if provided), and the content of your conversations.
- Data Usage: The information you share with the chatbot is used solely to respond to your queries and improve our services. The chatbot’s responses are powered by ChatGPT API, a language model developed by OpenAI.
- Data Retention: Chat logs are stored for internal use but are not shared with any third parties. Data retention is subject to your rights as detailed below.
3. Purpose of Data Processing
We process your personal data for the following purposes:
- To enable users to leave comments on our blog and participate in discussions.
- To provide users with responses and assistance through our chatbot.
- To improve our services and website functionality.
- To comply with legal obligations.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: By submitting comments on our blog or interacting with the chatbot, you consent to the processing of your personal data.
- Legitimate Interests: We may process your data to improve our services, ensuring the functionality and security of our website.
5. Data Sharing and Disclosure
We do not share, sell, or rent your personal data with third parties for marketing purposes. Your data is processed internally, and no personal information is shared with third-party services, except for the operation of the chatbot, which utilizes OpenAI’s ChatGPT API.
OpenAI does not have access to your personal data stored on our website. Only the content of your conversation with the chatbot is processed by OpenAI to generate appropriate responses.
6. Data Security
We take appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include encryption of sensitive data, regular security assessments, and access controls.
However, please note that no method of data transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee the absolute security of your data.
7. Your Rights
In accordance with the GDPR, you have the following rights regarding your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct any inaccuracies in your personal data.
- Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data, especially in cases where the data is no longer necessary for the purpose for which it was collected or if you withdraw your consent.
- Right to Restrict Processing: You can request a restriction on the processing of your personal data in certain circumstances.
- Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You have the right to object to the processing of your data, particularly for direct marketing purposes.
- Right to Withdraw Consent: If we process your data based on your consent, you may withdraw your consent at any time.
To exercise any of these rights, please contact us at contact@mahoutai.com. We will respond to your request within one month.
8. Data Transfers
Your data is stored on servers located in EU & US, and we take steps to ensure that your personal data is processed in compliance with applicable data protection laws. If data is transferred outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place to protect your data, such as the use of standard contractual clauses or reliance on adequacy decisions.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. We encourage you to review this policy periodically for any updates. Changes will be posted on this page, and the « Effective Date » will be updated accordingly.
10. Contact Information
If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at:
MahoutAI
contact@mahoutai.com