Privacy policy
Controller
EducPilot, sole trader (entrepreneur individuel, EI), bonjour@educpilot.org.
Data processed and purposes
- Account: name, email, sign-in. To identify you and provide the service (contract).
- Content: imported documents, texts, voices, videos, notes. Only to generate and edit your videos (contract).
- Billing: plan, payments, invoices, address and VAT number entered at Stripe. To collect payments and meet our accounting duties (contract, legal obligation).
- Usage and security: technical logs, minute and compute consumption, trial abuse detection. To run and protect the service (legitimate interest).
- Demo requests and contact: name, email, company, message. To answer you (pre-contractual steps).
- Where your sign-up came from: the site your first visit came from (its domain only), the campaign and landing page, the browser language and the date, attached to the account at sign-up, and your optional answer to "How did you hear about EducPilot?". To know which channels make us known (legitimate interest).
- Audience measurement: Google Analytics, only with your consent.
We do not sell your data and do not reuse your content to train models.
Processors
- Hetzner (Germany): application servers, database and files.
- Vercel (USA): website hosting and the gateway to the AI models (Vercel AI Gateway).
- AI model providers, through that gateway: OpenAI, Anthropic, Google, Z.ai. They receive the excerpts of your sources and the instructions needed for the generation.
- ElevenLabs (USA): voice-over, from the video’s script.
- Stripe (Ireland, USA): payment, invoices, fraud prevention. We never see your card number.
- Brevo (France): sign-in and service emails.
- Cloudflare (USA): network, protection and inbound email routing.
- Google (USA): Google Analytics audience measurement, only if you accept it.
Transfers outside the European Union
Some processors are in the United States. These transfers rely on the EU-US Data Privacy Framework when the provider is certified, or on the European Commission’s standard contractual clauses.
Retention
- Account and content: while the account is active, then deleted within 30 days of its closure.
- Invoices and accounting records: 10 years (legal obligation).
- Technical logs: 12 months at most.
- Demo requests without follow-up: 3 years after the last contact.
- Audience measurement: 14 months; your cookie choice: 6 months.
Cookies
A session cookie, required, keeps you signed in. A cookie keeps your audience measurement choice. A cookie keeps where your first visit came from for 90 days, read only by us if you create an account. Google Analytics cookies are set only after you agree, and you can change your mind at any time from the link at the bottom of the page.
Your rights
You can access, correct, erase or export your data, restrict or object to processing, and withdraw your consent, by writing to bonjour@educpilot.org. We answer within one month. You can also complain to the CNIL (cnil.fr), the French data protection authority.
Last updated: 2026-10-27.