English translation. This page is a translation provided for information only. The French version at /politique-de-confidentialite is the legally binding text.
Intelligence Artificielle Générale SAS (“LibertAI”), 76 Promenade des Anglais, 94210 Saint-Maur-des-Fossés, France — SIREN 985 392 356.
For any question or to exercise your rights:privacy@libertai.io.
LibertAI does not store the content of your exchanges with AI models in a database. Your requests are relayed to the inference servers and the response is then sent back to you; neither the requests nor the responses are stored in a database. Only usage counters — number of tokens, number of images, model called, timestamp — are retained for billing.
An account created with a wallet contains neither an email address nor any legal identity.
The chat application stores locally, in your browserand not on our servers: your conversation history and associated attachments, your assistants, projects and memories, your generated images, and your display preferences.
This data is never transmitted to us. Clearing your browser's site data deletes it permanently — we hold no copy of it and cannot restore it.
| Purpose | Legal basis |
|---|---|
| Account creation and management, provision of the service | Performance of the contract — Art. 6(1)(b) GDPR |
| Billing, subscriptions, usage accounting | Performance of the contract and legal obligations — Art. 6(1)(b) and 6(1)(c) |
| Security, abuse prevention, rate limiting | Legitimate interest — Art. 6(1)(f): protecting the infrastructure against fraud and misuse, and ensuring fair access to the service |
| Sign-in emails and service-related messages | Performance of the contract — Art. 6(1)(b) |
| Aggregated website audience measurement | Legitimate interest — Art. 6(1)(f): understanding traffic in order to improve the service, without individual profiling |
| Retention of accounting records | Legal obligation — Art. 6(1)(c) |
Whether the data is required. Account data is necessary for entering into and performing the contract: without it, the service cannot be provided. Any other information you choose to provide, such as a display name, is optional and not providing it has no consequence.
Source of the data. When you sign in via Google or GitHub, we receive your identifier and email address from that provider. The billing country is inferred from an IP address geolocation database provided by a third party. All other data comes from you or from your use of the service.
Automated decision-making. No decision producing legal effects concerning you, or significantly affecting you, is taken based solely on automated processing. Automated rate-limiting and abuse-prevention mechanisms may temporarily restrict access; any lasting suspension of an account is subject to human review and may be challenged at the address given in Section 1.
Data protection officer. No data protection officer has been appointed, as the nature and volume of the processing do not require one. Your requests are handled at the address given in Section 1.
We use the following providers, each for the purpose indicated:
| Provider | Role |
|---|---|
| Aleph.IM SAS | Hosting and confidential computing infrastructure |
| Revolut | Collection of card and bank transfer payments |
| thirdweb | Processing of crypto-asset payments |
| Google, GitHub | Sign-in via identity provider, if you use it |
| Email delivery provider | Delivery of sign-in emails |
| MaxMind (GeoLite2) | Determining the country for currency and VAT purposes |
| Self-hosted audience measurement | Traffic statistics for the website and applications |
| effigy.im | Generating the profile picture from the wallet address |
| CoinGecko | Crypto-asset prices displayed during a payment |
| Base, Solana and Aleph RPC nodes | Reading and sending on-chain transactions |
| jsDelivr, esm.sh | Delivery of components run in the code interpreter and the artifact preview |
When your browser contacts one of these services, that service technically receives your IP address, as with any resource loaded from a third-party domain. None of these calls serves an advertising purpose.
The inference servers receive the content of your requests for the time needed to produce the response. When you use the built-in web search, your search query is sent to our search service.
In the chat application, displaying the icons of the sites cited in search results relies on a third-party favicon retrieval service, which therefore receives the domain name of the sites concerned.
Some of the providers mentioned above are established outside the European Union, in particular in the United States. These transfers are subject to the appropriate safeguards provided for in Chapter V of the GDPR, in particular the European Commission's standard contractual clauses.
Crypto-asset payments are recorded on public blockchains, which are accessible worldwide and by nature cannot be modified: this public nature is inherent to the technology and beyond our control.
| Data | Period |
|---|---|
| Account and associated data | Until the account is deleted, or after 3 years without sign-in |
| Single-use sign-in tokens | 15 minutes, then deleted |
| Signature challenges (wallet) | Deleted upon use |
| Sessions | Until expiry or revocation |
| Usage and call counters | 13 months |
| Accounting and billing records | 10 years (Article L.123-22 of the French Commercial Code) |
| Audience measurement | 13 months maximum |
You have the rights of access, rectification, erasure, restriction of processing, portability and objection, as well as the right to withdraw your consent at any time where the processing is based on consent.
To exercise them, write toprivacy@libertai.io. We respond within one month, which may be extended by two months for complex requests. We may ask you for information allowing us to verify that the request does come from you.
Certain data cannot be erased: accounting records, which the law requires us to retain, and transactions recorded on a public blockchain, which are technically immutable.
Where the processing is based on our legitimate interest, you mayobject to it at any time on grounds relating to your particular situation (Art. 21 GDPR), at the same address.
In accordance with Article 85 of the French Data Protection Act (loi Informatique et Libertés), you may setdirectives regarding what happens to your data after your death, and designate a person responsible for carrying them out. These directives may be sent to us atprivacy@libertai.io.
You may lodge a complaint with theCommission nationale de l'informatique et des libertés (CNIL), the French data protection authority, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 —cnil.fr.
The website and applications set only:
| Name | Role | Type |
|---|---|---|
| libertai_auth | Maintaining your session | Strictly necessary |
| oauth_state | Protection of sign-in via Google / GitHub | Strictly necessary |
| oauth_redirect | Return to the original page after sign-in | Strictly necessary |
| preferred_instances | Routing continuity for inference calls | Strictly necessary |
| sidebar_state | State of the side panel | User convenience, requested by the user |
The display theme and your conversation data are stored in the browser's local storage, not in cookies. Crypto wallets that you connect may also write their own technical keys to this local storage.
These trackers are essential to the operation of the service and do not require your consent.
Audience measurement for the website and applications is provided by aself-hosted solution, without advertising cookies and without cross-site tracking. The data is strictly statistical, is not cross-referenced with other processing and is not shared with any third party. As such, it falls within the consent exemption provided by the CNIL for audience measurement.
No advertising cookies, no social network pixels and no third-party behavioral measurement trackers are set. Calls to the technical services listed in Section 7 are used neither for profiling nor for cross-site tracking.
This policy may be updated. The date at the top indicates the latest revision; in the event of a substantial change, users with an account will be informed.