Privacy Policy
Last updated: 25 August 2026
Data Controller
The data controller is ONLK SAS, 25 rue de Ponthieu, 75008 Paris, France (Paris Trade Register 990 439 739). For any question about your data: privacy@kaeoa.com.
Data We Process
- Account: email address, identifier, authentication data (via Clerk).
- Billing: customer/subscription identifiers and payment status (via Stripe — we never store card data).
- Watch configuration: keywords, sources, frequency, language, digest recipient address.
- Aggregated content: public articles collected and analysed to produce your digests.
- Technical logs: data strictly necessary to operate and secure the service.
Purposes and Legal Bases
- Providing the service (performance of the contract): creating and running watches, generating and sending digests.
- Billing and subscription management (performance of the contract / legal obligation).
- Security, abuse prevention and service improvement (legitimate interest).
- Service-related communications (performance of the contract).
Sub-processors
We rely on sub-processors that process data on our behalf:
- Clerk — authentication and account management.
- Stripe — payments and subscriptions.
- Vercel — application hosting.
- Neon — PostgreSQL database.
- Brevo — digest email delivery.
- Large-language-model provider (Anthropic, OpenAI or Mistral depending on configuration) — analysis and synthesis of aggregated content.
Transfers Outside the European Union
Some sub-processors are located outside the European Union (notably in the United States). Such transfers are governed by appropriate safeguards under the GDPR (European Commission Standard Contractual Clauses and/or applicable certification mechanisms).
Reorganisation and Business Transfer
If ONLK SAS is reorganised — incorporation of a subsidiary to operate the Service, merger, acquisition, contribution of assets or transfer of all or part of its business — the data processed in connection with the Service may be transferred to the entity taking over the contract, under the conditions set out in article 12 of our Terms. That entity then becomes the data controller and remains bound by this policy until it is updated; you will be informed of its identity and may exercise your rights with it on the same terms.
Retention Periods
Account and watch data are kept while the account is active and deleted or anonymised within a reasonable period after closure. Billing data is kept for the duration required by legal and accounting obligations.
Your Rights
Under the GDPR you have the rights of access, rectification, erasure, restriction, objection and portability. You may exercise them at: privacy@kaeoa.com. You may also lodge a complaint with your supervisory authority.
Security
We implement appropriate technical and organisational measures to protect your data (encryption in transit, access control, isolation of third-party services).
Cookies
The service uses only cookies strictly necessary for its operation (authentication, preferences). No advertising or third-party tracking cookies are set without your consent.
Changes
This policy may be updated. Any material change will be communicated to you by appropriate means.