Privacy policy

Who is responsible for your data

The data controller is Gabriel Mbenda N. (ORAKEN), publisher of Aubin. For any question or request about your data: contact@oraken.tech.

What we collect

Your account: email address, name if provided by your sign-in method, sign-up and last sign-in dates.

Your content: the questions you ask, the files and screenshots you attach, the analyses, deliverables and notebooks you create.

Your usage: credits used, chosen plan, analysis dates.

Payment: handled entirely by Stripe. We never see or store your card number.

Technical logs (IP address, date, requested address), kept by the host for security and to run the service.

Why

To provide the service you ask for: create your account, run your analyses, manage your credits and subscription (performance of the contract).

To keep the service secure and prevent abuse (legitimate interest).

To meet our legal obligations, including accounting.

We do not sell your data, we do not advertise, and we use no audience-measurement or tracking tools.

Who processes it

Hosting: Railway, in its European region (Amsterdam, Netherlands).

Sign-in: an authentication provider that handles your identification.

Payment: Stripe, acting as merchant of record for subscriptions and top-ups.

Artificial intelligence: Aubin relies on several models from specialised providers. The questions and content needed for an analysis are sent to them to produce the answer. These providers do not use your content to train their models and keep it only for a limited time.

Computation: each analysis runs in an isolated machine at a specialised provider; the machine is destroyed after one hour of inactivity.

Some of these providers are based outside the European Union, notably in the United States. These transfers are covered by the safeguards provided by the GDPR (European Commission standard contractual clauses or the EU–US Data Privacy Framework).

How long

Your content stays in your workspace until you delete it. You can delete an analysis at any time.

Your account and all your data are kept as long as your account exists. To delete it, write to contact@oraken.tech: we erase it within 30 days.

Billing records are kept by Stripe for the period required by law.

What you share

An analysis is private by default. If you create a share link, anyone with the link can see the shared version. Aubin warns you if it spots personal data before you share. You can remove a link at any time.

Cookies

Aubin uses a single cookie: the session cookie, needed to keep you signed in (30 days, extended as you use it). It is used for nothing else.

The site also keeps a few preferences in your browser (language, display). None of them is sent to third parties.

As these are strictly necessary for the service, they do not require consent.

Your rights

You can access your data, correct it, delete it, get it in a readable format (you can also export your analyses yourself), object to processing or ask for it to be restricted. Write to contact@oraken.tech; we reply within one month.

If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with the authority of your country.