Data collected
When creating an account: last name, first name, email address, password (hashed), company name, country.
When using the platform: documents you upload for review, your project settings, processing history, credits consumed.
Technical: application logs (timestamp, IP address) for security and traceability purposes.
Processing purposes
Provision of the AI-assisted document review service, billing, customer communication, security and fraud prevention, legal obligations.
No AI model training is performed on your documents.
Legal basis
Performance of the contract (provision of the service), legal obligations (billing, accounting retention), legitimate interest (security, fraud prevention).
Retention period
Account data: for the entire duration of the contractual relationship, then 3 years after account closure.
Uploaded documents: kept as long as the project exists, deleted on request or when the project is deleted.
Technical logs: 12 months maximum.
Billing data: 10 years (accounting obligation).
Your GDPR rights
Right of access, rectification, erasure, restriction, objection, portability. To exercise your rights: write to contact@eryon.eu.
You also have the right to lodge a complaint with the CNIL (www.cnil.fr).
Processors and transfers
Hosting: 3DS OUTSCALE (France, EU).
Transactional email delivery: Brevo (France, EU).
AI processing: providers involved to be qualified depending on the use case, with contractual commitments to be verified according to the scope.