Privacy Policy

1 · Data controller

The data controller is JOE ASSISTANT (SAS), SIREN 944 391 135, 200 rue de la Croix Nivert, 75015 Paris, France — contact@gripforge.ai. This policy explains what we collect when you use GripForge (gripforge.ai), why, for how long, and your rights under the EU General Data Protection Regulation (GDPR).

2 · Data we collect, purposes and legal bases

• Account data — email address, salted password hash (scrypt), plan, API key. Purpose: providing the Service, authentication, metering. Legal basis: performance of a contract (art. 6(1)(b)).
• Usage and metering data — attach counts per month, API request logs (timestamps, HTTP status, file names, IP address, user agent). Purpose: quota enforcement, reliability, debugging, abuse and fraud prevention. Legal basis: contract and legitimate interest (art. 6(1)(f)).
• Billing data — handled entirely by our Merchant of Record, Paddle, who acts as an independent controller for the purchase (identity, payment method, invoice). We receive subscription status and plan, never card numbers. See Paddle’s privacy policy for their processing.
• Product analytics — page views, feature usage and front-end errors via PostHog, hosted in the European Union. Data is pseudonymous; we do not sell it or use it for advertising. Legal basis: legitimate interest in improving the product.
• Support correspondence — emails you send to contact@gripforge.ai. Legal basis: legitimate interest / contract.

3 · Your 3D files

Uploaded characters and props are processed to compute the attach and are not retained after the request completes, apart from transient processing artifacts and failure logs kept briefly for debugging. Your models are never used to train machine-learning models, never shared with third parties, and never published. When the optional AI refinement is enabled, low-resolution renders of the fist/prop region (not your full scene) are sent to our AI inference provider (Anthropic) solely to score the placement, and are subject to their API data-handling terms (no training on API data).

4 · Processors and recipients

Personal data is shared only with the processors needed to run the Service:

• Hosting: OVHcloud (servers in the European Union);
• Payments & invoicing: Paddle (Merchant of Record, independent controller);
• Analytics: PostHog Cloud EU;
• AI inference (optional refine feature): Anthropic.

Where a provider processes data outside the EU/EEA, transfers rely on appropriate safeguards (adequacy decisions or Standard Contractual Clauses). We never sell personal data.

5 · Retention

• Account data: for the life of the account, then deleted within 30 days;
• API/audit logs: up to 12 months, then deleted or anonymized;
• Uploaded 3D files: not retained beyond request processing (see Section 3);
• Billing records: kept by Paddle per statutory accounting durations;
• Analytics: per PostHog EU retention settings, capped at 12 months.

6 · Cookies and local storage

We use a single first-party session cookie (gf_session, httpOnly, 30 days) strictly necessary for authentication — it requires no consent banner. Interface preferences (language) live in your browser’s localStorage. We set no advertising or cross-site tracking cookies. The Paddle checkout, when opened, sets its own cookies necessary for payment processing.

7 · Security

Passwords are stored as salted scrypt hashes; sessions are server-side with httpOnly cookies; transport is TLS-encrypted end to end; API keys can be regenerated on request. Access to production systems is limited to authorized personnel. No method is 100% secure — in case of a breach affecting your data we will notify you and the CNIL as required by articles 33–34 GDPR.

8 · Your rights

You have the right of access, rectification, erasure, restriction, portability, and objection (including to legitimate-interest processing), and the right to withdraw consent where processing is based on it. Write to contact@gripforge.ai — we answer within one month. Deleting your account removes your personal data within 30 days, subject to legal retention duties. You may lodge a complaint with the French supervisory authority, the CNIL (cnil.fr), or with the authority of your country of residence.

9 · Children and changes

The Service is a professional tool not directed at children under 15; we do not knowingly collect their data. We may update this policy; material changes will be announced on this page and, for account holders, by email.