Privacy Policy

• Account data: email address and basic identifiers provided during signup and authentication.
• Usage data: minimal analytics (PostHog EU) about app interactions and basic device/browser info to improve reliability.
• Content data: prompts, chat messages, and attached snippets you submit. Do not include sensitive personal data unless strictly necessary and lawful.
• Billing data: payment status and identifiers handled by our payment processor (card details are not stored on our servers).

We collect data directly from you (forms, prompts, chats) and automatically (cookies or similar). We use data to operate the Service, secure accounts, process payments, detect abuse, improve quality, and provide support. For AI responses, we may transmit your prompts and selected context to LLM providers to generate output.

• Contract: to provide the Service (authentication, chat, billing).
• Legitimate interests: to improve reliability and prevent abuse using minimal analytics.
• Consent: when required for specific cookies or marketing.
• Legal obligations: records and compliance duties.

• Supabase: authentication, database, storage (primary data layer). We also use OpenAI embeddings with Supabase for retrieval.
• Stripe: payment processing. We store customer and subscription identifiers, not card data.
• PostHog (EU): minimal product analytics and error capture via EU endpoints.
• LLM APIs (OpenAI, Anthropic): prompts and selected context are sent to generate responses. Avoid including personal data unless necessary.

Where providers are outside the EEA, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) where applicable.

Account data is retained until you request deletion of your account. We may retain aggregated or anonymized data that does not identify you.

Subject to conditions under applicable law, you may have rights to access, rectify, erase, restrict or object to processing, and data portability. You also have the right to lodge a complaint with a supervisory authority (in France, CNIL).

We implement technical and organizational measures appropriate to the risk. No method of transmission or storage is perfectly secure.

The Service is not directed to children. Do not use the Service if you are under the age required to consent to data processing in your jurisdiction.

We may update this Policy from time to time. If changes are material, we will provide reasonable notice via the Service. Continued use after the effective date means you accept the changes.

TASKFORCE LABS — 14 rue du Mesnil, 44230 Saint-Sébastien-sur-Loire, France. Email: contact@purrchat.app