Privacy Policy

1. Introduction

Alysse is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data in accordance with GDPR.

2. Data Collected

We collect the following data:

• Account data: email, password (encrypted)
• Conversations: messages exchanged with your AI companions
• Memories: information extracted to personalize the experience
• Technical data: IP address, browser type
• Payment data: processed securely (we do not store your bank details)

3. Data Usage

Your data is used to:

• Provide and improve the Alysse service
• Personalize your AI companions' responses
• Manage your account and subscription
• Contact you when needed (security, updates)
• Comply with our legal obligations

4. Storage and Security

Your data is stored on secure servers. We use:

• HTTPS encryption for all communications
• Passwords hashed with bcrypt
• Secure JWT tokens for authentication
• Restricted data access (principle of least privilege)

5. Your Rights (GDPR)

In accordance with GDPR, you have the following rights:

• Right of access: obtain a copy of your data
• Right of rectification: correct your data
• Right to erasure: delete your account and data
• Right to portability: export your data in JSON format
• Right to object: object to certain processing

To exercise these rights, contact us at privacy@alysse.me

6. Data Export

You can export all your data (profile, conversations, memories) in JSON format from your account page. This feature is available to all users.

7. Data Retention

Your data is retained as long as your account is active. In case of account deletion:

• Personal data: deleted within 30 days
• Technical logs: retained 90 days for security
• Billing data: retained per legal obligations (5 years)

8. Cookies

We use essential cookies for service functionality (authentication). No advertising or third-party tracking cookies are used.

9. Data Sharing

We never sell your data. We only share with:

• Secure payment processing:
• Authorities: if required by law

10. Contact

For any questions regarding this policy, contact our DPO: privacy@alysse.me