Privacy Policy

Equilibrition is published by KESEUL, a French single-member simplified joint-stock company (SASU) with share capital of EUR 1,000, registered with the Guéret Trade and Companies Register under number 984 132 142. Registered office: 2 place de l'Église, 23460 Le Monteil-au-Vicomte, France. Contact: equil@nanocorp.com.

This policy covers Equilibrition's public website, application and beta versions. For account management, customer relations and security, KESEUL determines the purposes of its own processing. Its role for content processed for professional activities depends on the use and the customer's instructions; the corresponding data processing agreement remains to be finalised.

Account and workspace: email, profile information provided, identifiers, preferences and access rights; captures, notes, tasks, projects, resources, files, links, life domains, deadlines and time blocks.

Connected features: permissions and tokens, calendar data actually used, audio submitted for transcription and the resulting text, and data shared with agents according to authorised access.

Website and commercial relationship: email, optional first name, language, registration source, support exchanges, order information and message delivery tracking. The path to checkout also records the date, language, button used, destination, referring page, user-agent and a bot indicator.

Data comes from you, use of the service, authorised integrations and information necessary for purchases transmitted by the payment process. The exact fields received from the seller and payment providers still need to be inventoried.

Providing requested features and managing access rely on performance of the contract for data necessary to that relationship. Support and a requested migration fall under performance of the contract or appropriate pre-contractual measures.

Account protection, abuse prevention and incident diagnosis rely on the legitimate interest in securing the service, subject to individuals' rights. Accounting obligations rely on the law.

Optional processing subject to consent, including advertising trackers, requires separate consent. Technical OAuth or microphone permission and acceptance of Terms of Use do not automatically constitute GDPR consent. The legal basis and retention periods of each usage measurement must still be checked against its actual configuration.

Services you connect receive content their permissions allow them to access. Write permissions may enable creation or modification without a new confirmation for every action.

Limit permissions to the needs of the use case. Revoking a connection blocks the relevant new access, without automatically deleting copies already sent to the external service or undoing past actions. Check that provider's terms and settings before sharing confidential information.

When you request a transcription, audio is sent to the server and then to OpenRouter for processing by the configured provider. The resulting text becomes workspace content and can be corrected.

According to the operation confirmed by the publisher, Equilibrition does not durably save audio recordings. This does not establish that OpenRouter or the final provider retains nothing. The final provider's actual identity, retention and training rules still need verification before this policy is finalised.

Connecting Google Calendar is optional. Google presents the requested permissions; Equilibrition receives connection tokens, not your Google password. You can withdraw authorisation in your Google account.

The exact fields read or written, synchronisation direction, deletion of imported data and compliance of possible transfers to agents with Google's Limited Use rules still need documenting. This document does not promise technical behaviour that has not been verified.

Information supplied by the publisher identifies Supabase for the database, authentication and files; Railway for application services; Resend for email; OpenRouter and the configured transcription provider; and PostHog for usage measurement and session replay.

The landing page also uses the NanoCorp platform and Meta Pixel; the commercial process uses NanoCorp and Stripe. External services you connect receive information authorised by their permissions. These recipients' exact legal roles and configurations remain to be finalised.

Human access to data may be necessary for support, a requested migration, security or a legal obligation. Calling a workspace private does not mean the publisher or hosting provider is technically unable to access it.

The publisher confirms Supabase hosting in a European region. This does not mean all processing, support access or other providers are exclusively within the European Economic Area.

The countries involved, contracting entities and transfer safeguards must be checked for each provider. No '100% in Europe' guarantee is inferred from the database region alone. Questions about processing locations and safeguards can be sent to equil@nanocorp.com.

When the account is permanently deleted, personal data relating to its use, including notes, tasks, projects, resources and files, is deleted immediately. Account deletion is not merely archiving. Keep or request the return of information you need before deleting the account.

Account deletion does not erase invoices or records that must be retained by law. Accounting records are retained for ten years from the end of the relevant financial year. A general reference to operating the company does not justify retaining all account content. Any other retention must have an applicable basis and be limited to necessary information for a justified period.

This immediate deletion rule is the one confirmed by the publisher. Its application to backups, logs and copies held by processors still requires technical verification; this document does not present that verification as completed.

Archiving content in the application is not erasure. Transcribed text follows the rules for account content. Copies received by external services you connected are not automatically erased by deletion in Equilibrition.

Detailed retention periods during the account's lifetime and those for website prospects, support, migration files, usage measurement, replays and evidence still need validation. No arbitrary period is substituted for actual configuration. The checkout language cookie, equilibrition_checkout_locale, is configured for six hours.

On the public website, Meta and OpenAI trackers (advertising) and NanoCorp/PostHog (browsing analytics, including interaction replay) load only after you agree to the relevant purpose. You can reject all, customize or withdraw via Manage cookies without preventing signup or purchase. Your choice is kept for 180 days on this site and device; it does not grant consent for the app. Withdrawal reloads the page to stop scripts already loaded.

The publisher reports using PostHog, including session replays. Its region, tested masking, retention periods, access and deletion still need verification. Accepting Terms of Use does not replace consent required for this optional processing.

Sending a requested guide and essential account messages is separate from subscribing to commercial communications. The choice and evidence of a marketing subscription must be verified separately in forms and sending tools.

Equilibrition uses access controls and permissions for workspaces and agents. The details of deployed measures must be verified; a private setting is not a promise of end-to-end encryption.

Limit sensitive data to what is necessary, respect the rights of the people concerned and check agent permissions. Simply putting health information in a note or accepting Terms of Use does not, by itself, constitute valid explicit consent to all processing of that information. The framework for sensitive and professional uses remains to be assessed.

User responsibilities do not remove the publisher's obligations. No service can guarantee absolute security; data breaches must be handled and notified under applicable regulations.

Subject to legal conditions, you can request access, correction, erasure, restriction and portability, and object to certain processing. You can withdraw consent without affecting earlier lawful processing and object to direct marketing at any time.

Send requests to equil@nanocorp.com or KESEUL's registered office. A response is due without undue delay, no later than one month. Complex or numerous requests may justify a two-month extension, with notice in the first month. Where there is reasonable doubt about your identity, only information necessary to verify it should be requested.

Exercising rights is generally free, subject to statutory exceptions for manifestly unfounded or excessive requests. You may also give instructions provided for under French law concerning your data after death and complain to the CNIL or the competent supervisory authority.

Changing your email preserves your account, its content and its Founder Pass. A partial erasure request does not require deleting the whole account by default. A refund request is not an erasure request.

Significant changes must be communicated appropriately. Publishing an updated policy alone cannot authorise new processing that requires consent.