Privacy policy

This Privacy Policy explains how we, Cartable Solutions SAS, collect, use and protect your personal data when you use Typique. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

1. Data controller

The data controller is Cartable Solutions SAS, whose details are set out in our Legal notice. For any question relating to your personal data, you can contact us at contact@typique.net.

2. Data we collect

We collect the following categories of personal data:

• Account data: your email address and authentication identifiers, and any name or profile information you provide when you create and manage your account.
• Content you submit: the text and documents you upload for analysis, together with any title you give them and the resulting analysis reports. Uploaded files are processed to extract their text; the original binary file is not stored.
• Transaction data: records of the credits you purchase and use, your purchase history and invoices. Payment card details are entered directly with our payment provider and are never received or stored by us.
• Technical and usage data: data necessary to operate and secure the Service, such as log data, device and browser information, and actions taken within the Service.

3. Why and on what legal basis we process your data

• To provide the Service (create your account, run analyses, manage your credits) — performance of our contract with you.
• To process payments and keep accounting records — performance of our contract and compliance with our legal obligations.
• To secure the Service and prevent abuse (rate limiting, fraud prevention) — our legitimate interest in protecting the Service.
• To improve the Service and provide support — our legitimate interest, or your consent where required.
• To comply with legal obligations — including tax, accounting and consumer-protection requirements.

4. How your submitted content is handled

When you submit a text or document, its content is processed to produce an AI-detection report. To do so, the extracted text is transmitted to an external AI-detection processor acting on our instructions. The analysis result is an automated, probabilistic estimate; it does not constitute proof and is provided for informational purposes only. We do not use your submitted content to train our own models, and we do not sell it.

5. Service providers (processors)

We rely on a limited number of carefully selected service providers who act as processors on our behalf and only process your data on our instructions. They fall into the following categories:

• authentication and account management;
• hosting of the application and of the database;
• payment processing and invoicing;
• AI-detection analysis of submitted content.

Each processor is bound by a data-processing agreement that requires appropriate security measures. We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

6. International transfers

We aim to keep your data within the European Economic Area (EEA). Where a provider processes data outside the EEA, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses.

7. How long we keep your data

• Account data is kept for as long as your account is active and deleted within a reasonable period after you close it.
• Submitted content and analysis reports are kept so that you can access your history, and removed when you delete them or close your account.
• Invoicing and accounting records are kept for the duration required by law (in France, generally 10 years).

8. Your rights

In accordance with the GDPR, you have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time where processing is based on consent. You can exercise these rights by contacting us at contact@typique.net. You also have the right to lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).

9. Cookies

We use cookies and similar technologies that are strictly necessary to operate the Service (for example, to keep you signed in and to secure your session). Where we use any non-essential cookies, we will request your consent beforehand. You can manage cookies through your browser settings.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or alteration. No method of transmission or storage is completely secure, but we strive to use commercially reasonable means to protect your data.

11. Children

The Service is not intended for children under the age of 15. We do not knowingly collect personal data from children below that age without appropriate consent.

12. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Material changes will be brought to your attention through the Service.

13. Contact

For any question about this Privacy Policy or about how we handle your data, contact us at contact@typique.net.