Privacy Policy

The data controller is Yoram Perez, French auto-entrepreneur, SIRET 88342013500013, registered address 29 rue des Deux Communes, 93100 Montreuil, contactable at support@paxai.me. This policy explains what personal data we process, why, and your rights under the EU General Data Protection Regulation (GDPR) and French data-protection law.

Account data: your email address and authentication details when you sign in.

Subscription and payment data: your plan, subscription and trial status, and payment records. Card details are handled directly by Stripe; we do not store your full card number.

Usage data: the messages you send to Pax and the responses generated, which we store so that you can revisit your past conversations (see Section 3), plus basic technical and usage information (for example timestamps and number of uses).

Cookies and similar technologies: see the Cookie section below.

We do not ask for special-category data. Please do not enter sensitive personal information about yourself or others into Pax.

Pax processes your messages to generate responses using a third-party AI provider (Anthropic). Your conversations are stored and associated with your account so that you can return to your chat history. Your conversations are private to your account and are not accessible to other users. We do not use your conversations to build an advertising profile of you, and we do not sell them. You can ask us to delete your conversations at any time by emailing support@paxai.me. Our AI and hosting providers may process message content to deliver and store the Service, under their own terms and safeguards.

To provide the Service you signed up for (performance of our contract with you): account, access, processing and storing your messages, delivering responses, and providing your chat history.

To take payment and manage your trial and subscription (performance of contract; legal obligation for accounting and tax records).

To keep the Service secure and prevent abuse (our legitimate interest).

To comply with legal obligations (for example tax and accounting record-keeping).

With your consent, for any non-essential cookies (see Cookie section).

We use trusted providers who process data on our behalf:

Lovable and Supabase: the platform and infrastructure that host and run the Service, including application hosting, database, and authentication.

Anthropic: our AI provider, to generate responses to your messages.

Stripe: payment processing.

These providers act as our processors (or, for payment, as independent controllers where applicable) under contractual and legal safeguards. Some may process data outside the EU; where they do, this is covered by appropriate transfer safeguards such as EU Standard Contractual Clauses.

We do not sell your personal data.

Account and subscription data: for as long as your account is active, and afterwards as needed for legal, accounting, and tax obligations (in France, typically up to 10 years for accounting records).

Message content and conversation history: kept while your account is active so you can access your history, and deleted on account closure or on your request, subject to any legal retention we are required to observe.

Cookies: for the periods described in the Cookie section.

Under GDPR you have the right to: access your data; correct it; erase it; restrict or object to processing; data portability; and to withdraw consent at any time (where processing is based on consent). You can exercise these rights by emailing support@paxai.me. You also have the right to lodge a complaint with the French data-protection authority, the CNIL (www.cnil.fr).

We take reasonable technical and organisational measures to protect your data, and rely on the security measures of our providers (Lovable, Supabase, Anthropic, and Stripe). No online service can be guaranteed 100% secure.

We may update this policy and will post the updated version with a new "last updated" date.

Privacy questions or requests: support@paxai.me.