Privacy policy

01Data controller

Artaun Hosting, registered association, 1 rue des Aziaux, 52410 Eurville-Bienville, France, is the controller of the processing described here. Contact for any question about your data: [email protected].

For the data you host on our services, you are the controller and Artaun acts as processor (see the data processing agreement).

02Data processed

• Account: first and last name, email, postal address, phone (optional), language;
• Billing: orders, invoices, payment method used (never the full card number);
• Security: IP addresses and login logs, devices, failed attempts, two-factor authentication;
• Support: tickets, exchanges with the assistant or an advisor;
• Services: technical information required for operation (server IP addresses, resource metrics, technical logs).

03Purposes and legal bases

• providing the services ordered, billing and support — performance of the contract;
• keeping invoices — legal obligation;
• securing accounts and infrastructure, preventing fraud, multiple accounts and abuse — legitimate interest;
• informing you of incidents and due dates — performance of the contract;
• answering through the conversational assistant — legitimate interest; you can ask for a human advisor at any time.

04Recipients and providers

Your data is never sold. It is only shared with the providers we need, each for its own task:

• Stripe and PayPal: online payment;
• Cloudflare: content delivery and attack protection (IP addresses, requests);
• Google (Gemini model): generating the assistant's answers from the messages you send it; sign-in with a Google account if you choose it;
• Discord: forwarding your messages to our team when you ask for a human advisor, and sign-in with Discord if you choose it;
• Amazon Web Services (Stockholm region): relay for sending some emails;
• proxycheck.io: checking the login IP address to fight fraud;
• OpenProvider: domain name registration (data sent to registries and the WHOIS directory according to their rules);
• our datacenter partner, for the physical hosting of the servers in France.

Some of these providers are established outside the European Union (notably in the United States); transfers are governed by the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

05Retention periods

• account and services: for the duration of the contractual relationship, then three years after the last contact, unless you object;
• invoices and accounting records: ten years;
• login and security logs: one year;
• conversations with the website assistant: thirty days; tickets: three years after closure;
• data of a deleted service: erased at the end of the grace period, backups included within the following days.

06Security

Encrypted connections (HTTPS), hashed passwords, two-factor authentication available, encrypted technical secrets, limited and logged administrative access, continuous monitoring of the infrastructure. Artaun only accesses the content of your servers at your request (ticket) or for security reasons.

07Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. A copy of your data can be downloaded from the "Data" tab of the client-area settings. To exercise your rights: [email protected]. You may lodge a complaint with the CNIL (www.cnil.fr).

08Minors

Our services are intended for adults or minors with the consent of their legal guardian. Minors under fifteen cannot create an account without such consent.

09Changes

This policy may change; the update date is shown at the top of the page. You are informed by email of any significant change.