Privacy

1.Purpose

This policy describes the personal data handled by Auto-Veille, published by AILIX.AI.

The publisher’s and the host’s registration details are in the legal notice.

2.Who is responsible for what

Two sets of data coexist: your account and use, and what a client organisation enters.

First among the latter is the distribution list, built by that organisation’s admin.

How those roles are qualified in law, and the agreement covering them: to be completed.

3.The data we handle

The service handles little, and it falls into three categories.

• Your identity: the email you sign in with, and when it was verified. No password.
• Your membership: delivery address, name if given, role, copies, status and dates.
• Your use: the articles you open, save or archive, and the editions sent to you.

4.Where the data comes from

Either you provide it: your sign-in address, your name, what you save while reading.

Or your administrator listed your address; no account is created in your name.

Sign-in address and delivery address may differ: one identifies you, one receives.

5.Why we handle it

To open and secure your session, and to compose and send you the weekly edition.

To give you your editions and saved articles, and to run and repair the service.

The legal basis relied on for each of these purposes: details to be completed.

6.Cookies

The site sets cookies it needs: those carrying your session, and the chosen language.

No advertising cookie is set, and the site uses no third-party analytics today.

A detailed cookie list, with purpose and lifetime: details to be completed.

7.Processors and hosting

Authentication and the database run on Supabase. Hosting is the provider named in the notice.

The full processor list, where data is held and any transfer safeguards: to be completed.

8.How long data is kept

Retention periods by category, and what happens at their end: details to be completed.

No period is announced here until it has actually been settled.

9.Security

Access is partitioned by organisation inside the database, not by the application alone.

Having no password removes a whole family of risks: none to reuse, none to steal.

The procedure and deadlines if data is breached: details to be completed.

10.Deleting your account

Deleting your account detaches your identity; the memberships and their history stay.

Your address stays on your organisation’s distribution list, which can remove it.

Read and saved state stays with the membership, so a successor would inherit it.

11.Your rights

A dedicated address, proof required, response time and any data officer: to be completed.

The contact page is the way in meanwhile. The rights the GDPR gives you are these:

• a right of access and rectification;
• a right to erasure and to restriction of processing;
• a right to object to processing;
• a right to the portability of the data you provided;
• a right to lodge a complaint with the CNIL.

12.Changes to this policy

This policy has not been reviewed by counsel and will be completed before opening.

Last updated date, version history and notice of changes: details to be completed.