Privacy policy
This policy explains how DIGITAK ("we", "us") processes personal data when you visit this website, contact us, hold a customer account, or send requests to our inference API.
1. Who we are
- Controller
- DIGITAK SAS, a société par actions simplifiée, SIREN 827 679 093, 47 boulevard de Courcelles, 75008 Paris, France
- Privacy contact
- privacy@euravo.co
- Data Protection Officer
- No DPO has been appointed. Contact privacy@euravo.co for any data-protection question.
2. Our role
- Controller for website visitor data, sales enquiries, customer account data, and billing data.
- Processor for the content our customers send to the API (prompts, files, and generated outputs). We process that content only on the customer's documented instructions under our Data Processing Agreement (DPA, GDPR Art. 28). If you are an end user of one of our customers, contact that customer to exercise your rights.
3. API content: zero retention
- Prompts and completions are processed in memory to produce a response. They are never written to disk, logs, databases, or backups.
- API content is never used to train, fine-tune, or evaluate models.
- API content is processed only in EU datacenters and is never transferred outside the EU/EEA.
- For each request we record only operational metadata: request ID, model, streaming flag, HTTP status, error category, token counts, and latency. This metadata is used for billing, capacity planning, and incident investigation, and is kept as a billing record for as long as accounting law requires (10 years).
- Our reverse proxy keeps an access log with the client IP address, HTTP method, status code, timestamp, and duration. It holds no request paths, query strings, headers, or bodies, and is kept for security purposes in size-limited rotating log files that are overwritten as new traffic arrives.
- API keys are stored as one-way hashes (SHA-256), never in plaintext.
4. Personal data we process as controller
| Purpose | Data | Legal basis (GDPR Art. 6) | Retention |
|---|---|---|---|
| Answering access requests and enquiries | Name, email, company, message content | Steps prior to a contract (6.1.b) / legitimate interest (6.1.f) | 3 years after last contact |
| Managing customer accounts and API keys | Name, business email, company, hashed API keys | Performance of a contract (6.1.b) | Contract duration + 5 years |
| Billing and accounting | Billing contact, address, VAT number, invoices, usage metadata | Legal obligation (6.1.c) | 10 years (French Commercial Code, art. L123-22) |
| Security and abuse prevention | IP addresses in access logs | Legitimate interest (6.1.f) | Until overwritten by log rotation |
5. Website
This website sets no cookies and uses no analytics or tracking.
The website (not the API) is hosted by Cloudflare, Inc., which receives your IP address, browser user agent, and the page requested in order to deliver the site and protect it against abuse.
Styles on the legal pages are loaded from the jsDelivr CDN, which receives your IP address and browser user agent when you load one of those pages.
6. Recipients and sub-processors
Personal data is accessible only to authorised staff and to the sub-processors listed on our sub-processors page, each bound by a DPA. We do not sell personal data.
7. International transfers
API content is never transferred outside the EU/EEA. Website visitor data (section 5) is processed by Cloudflare, Inc., a US company, under the EU-US Data Privacy Framework and the Standard Contractual Clauses in Cloudflare's Data Processing Addendum.
8. Security
All traffic is encrypted in transit with TLS. Access to production systems is restricted and logged. API content is never written to disk or to logs.
9. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and objection. You also have the right to give instructions on what happens to your data after your death (French law "Informatique et Libertés"). To exercise these rights, email privacy@euravo.co. We reply within one month.
You may also lodge a complaint with the French supervisory authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.
10. Changes
We will post any change to this policy on this page and update the date above. We will notify customers by email of material changes.