PUBLISHED DOCUMENT

Privacy policy

§ 1 · Who we are

Permia SAS, a company under French law, is the data controller for this website and, where it processes personal data on its own behalf, for the service. Where Permia hosts customer environments, it acts as processor under the Data Processing Agreement.

§ 2 · On this website

This site sets no analytics cookies and runs no third-party trackers. If you book a demo, we collect the name, work email, company name and profile selection you enter in the booking form, plus whether you asked to receive the DPA before the call, and we use them to run the call and nothing else.

§ 3 · In the product

To operate your environment we process your account email, billing details, and the operational logs described in the AUP. We never collect your model API keys: they live in your environment and authenticate your account with your model vendor. We do not read your code in the course of operations.

§ 4 · Lawful bases (Art. 6 GDPR)

Demo-booking data (name, work email, company, profile selection, DPA-request flag): Art. 6(1)(b), steps taken at your request prior to entering into a contract. Account and authentication data: Art. 6(1)(b), performance of the contract. Billing data: Art. 6(1)(b) and Art. 6(1)(c), the legal retention obligations French law places on invoices. Infrastructure and security logs, including the operational access log described in the AUP: Art. 6(1)(f), our legitimate interest in the security, abuse prevention and availability of the service. Support requests: Art. 6(1)(b) and 6(1)(f). We process no Art. 9 special-category data intentionally, run no advertising profiling, and sell no personal data.

§ 5 · Recipients

OVHcloud SAS, a company under French law, hosts our infrastructure in France and is our only contracted sub-processor; the current list, with role and jurisdiction, is published on the sub-processor page. Demo bookings reach us by email to demo@permia.eu; billing and demo-booking tooling is not yet contracted, and any such vendor will be named on the sub-processor list, with its role and jurisdiction, before it processes the first record. We sell no personal data and share none with advertisers.

§ 6 · Transfers outside the EU

We make no transfers outside the EU for the personal data we process: hosting is at OVHcloud in France. Any traffic between your agent and your model vendor runs on your own keys, under your own contract with that vendor, outside our perimeter.

§ 7 · Retention

Demo-booking data is deleted twelve months after the last contact. Account data is kept for the life of the contract plus the retention French law requires for invoices. Operational access logs are kept twelve months.

§ 8 · Your rights

Under the GDPR you can ask for access, rectification, erasure, restriction, portability, and you can object. Write to privacy@permia.eu; we answer within thirty days. You can also complain to the CNIL (www.cnil.fr).