Privacy Policy

This Privacy Policy defines how VitaeTek collects, uses, and protects the information and data you transmit to us when you use our websites, services, and the ArchEngine platform, in accordance with the General Data Protection Regulation (GDPR) and applicable legislation.

1. Data Controller

The processing of personal data collected on the websites and subdomains of VitaeTek and ArchEngine is managed by the sole proprietorship VitaeTek EI (SIRET 488385766). For any questions or requests regarding your data, you can contact us directly at: hello@vitaetek.fr.

2. Data Collected and Purposes

In the interest of respecting your privacy, we apply the principle of data minimization. We collect different categories of data depending on your use of our services:

2.1 Contact and Informational Data (Legal Basis: Consent)

Via our contact, registration, or giveaway forms, we collect your email address to:

• Manage your participation in giveaways, contests, or promotional offers related to the ArchEngine ecosystem.
• Send you newsletters, updates, and information regarding the deployment of our solutions from our dedicated address.

2.2 Account, Billing, and Infrastructure Data (Legal Basis: Performance of a Contract)

As part of your purchase of our SaaS software licenses (unlimited access offers) or custom services, we collect:

• Identity and Profile Data: First name, last name, corporate name, professional address, SIRET/VAT number.
• Billing and Payment Data: Transaction details (processed in an encrypted and secure manner exclusively by our payment gateways Stripe or PayPal; VitaeTek never stores any bank or credit card coordinates).
• Technical Configuration Data: Your personal API keys (OpenRouter, OpenAI, Gemini, etc.) essential to the technical operation of the ArchEngine modules. These keys are encrypted at rest and are only used to execute your technical requests. The technical processing via these keys inherently implies the transfer of your queries to the infrastructures of the third-party providers you select.

3. Specific Framework for ArchEngine SaaS Applications (GDPR Postures)

When using the SaaS modules (BrandArch, ProfileArch, DealArch, VSLArch), a fundamental distinction is made:

You are the Data Controller: You remain the sole master of the data, text inputs, user profiles, documents, or prompts that you inject into our modules for processing. It is your strict responsibility to ensure the compliance of these data with current regulations.

VitaeTek is the Data Processor: We process these data exclusively on your behalf and according to your technical instructions to generate the requested deliverables. We formally commit never to use your prompt data, corporate analysis inputs, or private text fields to train public or third-party artificial intelligence models without your express, written consent.

4. Data Retention Periods

Your personal data is kept by VitaeTek only for the duration strictly necessary for the pursued purposes:

• Marketing and Newsletter Data: Maximum of 3 years from your last active interaction (click, open), unless unsubscription or deletion is requested earlier.
• Account and Access Data: Throughout the duration of your contractual relationship and account activation, then archived for 5 years for civil evidence purposes.
• Billing Data: Kept for 10 years in compliance with French accounting and fiscal obligations.

5. Data Recipients and Processors

Your personal data is strictly confidential. It is never sold, rented, or transferred to third parties for commercial purposes. To ensure the proper functioning of our ecosystem, it is shared exclusively with our trusted technical processors, all in strict compliance with the GDPR:

• Brevo (formerly Sendinblue): For managing and sending our marketing emails and newsletters.
• Stripe / PayPal: For the secure processing of your financial transactions.
• Vercel / Supabase / AWS: For the highly secure hosting of our application infrastructures, backend logic, and databases.

6. Cookies and Tracking Technologies

In order to guarantee a smooth, fast, and privacy-first user experience, our websites and platforms are designed according to the Privacy by Design principle:

• No consent-based tracking cookies: We do not use any advertising tracking cookies, tracking pixels (Meta, Google, LinkedIn), or behavioral analytics tools requiring prior consent.
• Strictly necessary cookies: Only technical and functional identifiers essential for the proper operation of the service (maintaining secure sessions, saving language preferences) may be stored. In accordance with GDPR guidelines and European regulations, these essential technical cookies do not require a consent banner.

7. Your Rights

In application of European regulations, you possess comprehensive rights over your data: right of access, rectification, erasure (right to be forgotten), restriction of processing, and portability. You can also withdraw your consent at any time for our communications via the unsubscription link located at the bottom of each email.

To exercise these rights, simply send us a message at: hello@vitaetek.fr. If you feel your rights are not being respected, you have the right to lodge a complaint with the CNIL (cnil.fr).