MNEMONICA SpA is responsible for personal-data processing by Le Confidant. For privacy questions or requests, including about information uploaded by somebody else, email info@leconfidant.ai.

We provide accountless conversation analysis. We do not sell personal data, and neither we nor our AI providers use your uploaded conversations to train AI models. Access expiry does not mean every copy has been erased immediately; section 5 explains the distinction.

1. Information we process

Information	Purpose
Uploaded chat text, participant aliases, timestamps, derived metrics, analysis, search indexes and session questions/replies	Provide the conversation analysis and session chat you request
Client Audit form information	Prepare the requested business-conversation analysis
Homepage assistant messages and replies	Answer product questions and review the assistant's performance
PayPal payment references, amount, currency, date and plan	Deliver purchases, handle refunds and maintain financial records
Terms version and acceptance time, immediate-access request and session references	Record agreements, administer sessions and resolve disputes
Support messages and contact details you provide	Respond to requests
IP addresses, device/request information and diagnostic logs	Operate, secure and troubleshoot the service and prevent abuse
Consented analytics, including pages, device/browser details, approximate location and product events	Understand usage and measure service performance

Names in participant labels are replaced in your browser when you choose aliases. Names, places and other identifying information inside messages can still reach us. This is pseudonymisation, not full anonymisation.

The browser tools process chat files locally and may cache results on your device. Ordinary website services can still make network requests. When a file is attached to the homepage assistant, only locally computed summary metrics are sent, not that file's messages; text you type to the assistant is sent.

2. Processing grounds and other participants

We process information necessary to provide the service under our agreement with the uploader, and financial records to meet applicable legal obligations. For personal information about other people in uploaded conversations, we require prior informed written permission as described in our Terms. Sensitive information also requires explicit authorization and any additional legal condition that applies. Where permitted by applicable law, we rely on legitimate interests for operating and securing the service and answering requests, subject to the affected individuals’ rights and reasonable expectations. Where consent is legally required, the relevant processing requires valid consent; analytics is optional and based on consent.

Before uploading, uploaders must give the people concerned this Privacy Policy and obtain their informed written permission for the requested AI processing by Le Confidant and its providers, together with any other required authority, notices and permissions. Their acceptance of our Terms does not constitute consent from every person in a conversation or remove our responsibilities. Sensitive information requires an additional legal condition where applicable; uploaders must not submit it without explicit authorization from the affected person and permission under applicable law.

Information about other participants comes from the uploader. We use it for that session's analysis, not to build profiles across different conversations. A person whose information was uploaded can contact us to exercise their rights, even without using Le Confidant. If required authorization is absent or an upload is unlawful, we may restrict processing and remove the content.

3. Recipients and AI services

We use OpenAI for AI processing, TypeSafe (Jev) for conversation signals, DigitalOcean for app hosting, Supabase for the database, Cloudflare for security and search indexes, Intercom for requested support, and Google Analytics for consented measurement. They receive the information needed for their respective functions. AI analysis involves sending conversation content to the AI providers; replacing names does not make this content anonymous.

PayPal handles payments and also acts as an independent controller under its Privacy Statement. We do not receive your payment-card details.

If you connect a session to a third-party AI assistant, it can access the results you authorize within the connection's permissions. Its own terms govern its handling of that information. We may also disclose information to comply with law or protect legal rights and safety.

ChatGPT plugin

If you connect Le Confidant in ChatGPT, you select an eligible existing free analysis and explicitly authorize sharing its numeric aggregates. The plugin returns neutral participant labels A/B, message counts and shares, conversation starts, reply timing, mean message length, definitions and expiry. It does not return names, raw messages, excerpts or paid insights. Its optional demo and period comparison use a clearly labeled fictional conversation.

Necessary cookies identify the browser that uploaded the session and protect the authorization step. Connection records contain hashed credentials and a session binding; the plugin does not create another store of conversation content. Access ends with the original free-session hour, or earlier on revocation, deletion or upgrade. You can revoke the current connection in ChatGPT or all grants for a session on the connection-management page, using the browser that uploaded it. Revocation and deletion stop future reads but do not remove results already shared in ChatGPT. OpenAI's terms and privacy policy govern its handling of those results.

4. Processing outside your country

Our app is hosted in DigitalOcean’s New York region (NYC3), and our Supabase database is in US West (Oregon). These are not the only locations where our providers may process data.

Our providers may process information in Chile, the United States and other countries. International processing must meet applicable data-protection requirements, including appropriate transfer safeguards where required. These can include recognized adequacy arrangements or standard contractual clauses, depending on the recipient and applicable law. Contact info@leconfidant.ai for information about processing locations and safeguards applicable to your data, or to request copies where available.

5. Retention and deletion

Session access lasts 1 hour for Free, 24 hours from purchase for Pro, or 3 days from purchase for Advanced. Session content is intended for use during that window. You can initiate deletion earlier from the session page or ask us for assistance.

Access expiry and physical deletion are separate. Expired session data is processed by scheduled cleanup. Uploaded files, audit information, search indexes and provider-held copies can remain after access ends while their deletion is completed. A deletion request does not guarantee immediate erasure from every system. Contact us if you need confirmation of the status of your data.

Category	Retention criteria
Conversation content, analysis, audit information and session chat	Session use followed by deletion processing; residual copies may remain while cleanup or provider deletion is completed
Homepage assistant messages	Scheduled for deletion after 7 days
Payment and related financial records	Normally six years for tax documents and supporting payment records; longer where required by law or an unresolved tax review or dispute
Acceptance and minimal session records	As needed to establish the agreement and handle related claims within applicable limitation periods; these are separate from conversation content
Support communications	While the request is handled and as necessary for related disputes or legal obligations
Security/access logs	For operational investigation, security and any legally required access-record retention
Analytics	According to the provider's retention controls and measurement purpose; aggregated reports can be retained longer than individual event records

Backup copies, if maintained, may persist until rotation or deletion. Provider retention can differ from session access periods. Deleting content from Le Confidant does not itself delete independent payment records or data you shared with another service. You can ask us about applicable retention and request deletion under section 7.

Google Analytics user and event data is configured for 14 months; new activity resets the user retention period. Aggregated reports may remain longer.

6. Cookies and browser storage

Necessary storage supports language, session access, security and your cookie choice. Browser storage also supports requested features such as theme preferences, the assistant and local tool caches; you can clear it through your browser.

Google Analytics loads only after you accept analytics. You can reject it or withdraw through Cookie settings in the footer. Our analytics events are designed to exclude conversation text and replace bearer session identifiers. The support widget loads when you request support; necessary support storage enables that conversation.

With your analytics consent, Google Analytics measures site usage, purchases and campaign performance and may share conversion measurements with our linked Google Ads account. This consent does not authorize personalized advertising.

7. Your rights

Depending on applicable law, you may request access, correction, deletion, a portable copy, restriction or objection to processing, or withdraw consent. Withdrawal does not invalidate earlier lawful processing. You can complain to your competent authority, including an EU data-protection authority or Brazil's ANPD where applicable.

Email info@leconfidant.ai with enough information to identify your request. We may ask for proportionate verification and will protect other people's information when responding. You do not need an account or to have uploaded the conversation. We respond within applicable legal deadlines. If information has already been deleted, we may no longer be able to retrieve it.

8. Children, security and changes

The service is for adults aged 18 and over. Conversations involving minors are prohibited; if we learn that we hold one, we delete it. We do not claim to detect every such upload.

We use encrypted connections and restrict production-system access. No system is completely secure. Keep session links private and avoid submitting unnecessary personal information.

We will announce material policy changes on the site and update the version and publication date. Contact: MNEMONICA SpA — info@leconfidant.ai.