Skip to content
VENKAIRequest access

Legal

Privacy policy

Last updated: draft

Draft — not yet reviewed by counsel

This document sets out the required structure and the facts that must be supplied. It has not been validated by a qualified lawyer and must not be relied upon as it stands. Highlighted fields must be completed from the official register before this site is published commercially. See ops/LAUNCH_CHECKLIST.md.

This policy covers personal data processed through this website and through direct contact with us. It does not cover source material processed by the Venkai engine: that runs on the customer's own machine and never reaches our infrastructure.

1. Controller

The controller is to be provided: name, registered at to be provided: address, company number to be provided: companyNumber. Contact: contact@venkai.fr.

A Data Protection Officer is not appointed. Whether Article 37 GDPR requires one must be confirmed with counsel before publication.

2. What we process, and why

  • Correspondence. When you email us, we process your address and the content of your message in order to reply. Legal basis: legitimate interest (Art. 6(1)(f)).
  • Server logs. Our host records IP address, user agent and requested URL for security and availability. Legal basis: legitimate interest. Retention is set by the hosting provider and must be confirmed.
  • Nothing else. This site has no analytics, no tracking pixel, no advertising tag, no embedded third-party script and no form that submits to us.

3. Source material never leaves your machine

The engine parses and edits files locally. No file content, no file name, no repository metadata and no model API key is transmitted to us or to a third party by the engine. This is an architectural property, not a policy commitment — there is no upload path.

4. Recipients and transfers

Personal data is shared with our hosting provider (to be provided: host) and our email provider, acting as processors. A record of processing activities and the corresponding data processing agreements must be in place before launch.

No transfer outside the EEA is intended. If the email provider processes data outside the EEA, the transfer mechanism must be documented here.

5. Retention

Correspondence is kept for the duration of the exchange and for to be decided: retention period afterwards. Server logs follow the provider's standard retention.

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), rue de la Presse 35, 1000 Brussels. Requests go to contact@venkai.fr.