Privacy Policy | Exova AI

Article 1 - Identity of the Data Controller

This policy is published by Selestia, the publisher company of the Exova AI application. Selestia acts as the Data Controller under Regulation (EU) 2016/679 (GDPR).

Article 2 - Scope of application

This Privacy Policy applies to all users of the Exova AI application, available on iOS, Android, macOS, and Windows. It governs the collection and processing of personal data in connection with the use of the services offered.

Article 3 - Data collected

As part of the use of Exova AI, Selestia may collect the following data: identification data (last name, first name, email, phone, company), account and subscription-related data (subscribed plan, payment history, transaction identifiers), contents added to the AI Brain, imported files, conversations and instructions given to AI Agents, data generated by artificial intelligence, as well as technical data (IP address, device, operating system, logs, Firebase identifiers, analytics data). Banking data is exclusively processed by Stripe and is never stored by Selestia.

Article 4 - Purposes of processing

Data is collected in order to create and manage user accounts, provide Exova AI services, enable AI Agents to function, personalize answers, manage payments and subscriptions, administer the affiliate program, ensure security and prevent fraud, improve app performance, and comply with legal obligations.

Article 5 - Legal basis

Processing is based on the performance of the contract concluded with the user, Selestia's legitimate interest (security, service improvement), compliance with legal obligations, and, where necessary, user consent.

Article 6 - Subcontractors and partners

Data may be transmitted to service providers strictly necessary for the operation of the service, in particular Stripe (secure payment), Google Analytics (usage analysis), Firebase (technical infrastructure), Google Cloud Platform (hosting), and OpenAI (processing via artificial intelligence models). These providers act as subcontractors and are contractually bound to comply with current regulations. Selestia does not sell any personal data.

Article 7 - Transfers outside the European Union

Some providers may involve data transfers outside the European Union. These transfers are governed by appropriate safeguards, including standard contractual clauses approved by the European Commission, as well as technical and organizational measures compliant with the GDPR.

Article 8 - Data processed by Artificial Intelligence

Content submitted to Exova AI may be processed by artificial intelligence models provided by tech partners. This data is used solely for the purpose of providing the requested service. Selestia does not commercially exploit user content and does not resell any data. The user remains responsible for the information they submit via the application.

Article 9 - Retention period

Data is kept for the entire duration of the account usage, then archived for the time necessary to comply with legal obligations (especially accounting and tax). It may be deleted or anonymized upon the user's request or after legal deadlines.

Article 10 - Data security

Selestia implements appropriate technical and organizational measures to protect personal data, including secure hosting on Google Cloud, communication encryption (HTTPS/TLS), access control, logging of sensitive actions, and protection against unauthorized access.

Article 11 - User rights

In accordance with the GDPR, users have the right to access, rectify, erase, restrict, object, data portability, and the right to withdraw their consent at any time. Requests can be sent to contact@exova.ai. A response will be provided within a maximum of one month. In case of dispute, users can contact the CNIL.

Article 12 - Account deletion

The user can request the deletion of their account at any time. This deletion results in the erasure of associated personal data, unless there is a legal obligation to retain it.

Article 13 - Minors' data

Exova AI is not intended for people under 15 years old. Users under 15 can only use the service with prior written authorization from a parent or legal guardian. Selestia does not knowingly collect data regarding minors without parental consent. Should a non-compliant processing be discovered, the data will be deleted as soon as possible.

Article 14 - Policy modification

Selestia reserves the right to modify this Privacy Policy at any time. In the event of a substantial change, users will be informed via the application. For any questions regarding personal data, you can contact: contact@exova.ai