Privacy Policy

Last updated: April 2026

1. Introduction

This privacy policy explains how Hephaistos collects, uses, and protects your personal data in compliance with the General Data Protection Regulation (GDPR).

2. Data Controller

The data controller is the operator of the Hephaistos application.
Contact: contact@olympe.tech

3. Data Collected

Account information: email, username, profile picture
Conversations: messages exchanged with the AI
Technical data: device type, IP address, connection logs
Preferences: application settings, language, theme

4. Legal Basis for Processing

Your explicit consent
Performance of the service contract
Our legitimate interests (security, service improvement)

5. Use of Data

Provide and improve the service
Personalize your experience
Ensure the security of your account
Communicate with you (notifications, updates)

6. Storage and Security

Your data is stored securely via Supabase (EU region). Communications are encrypted. Conversations with the local AI remain on your infrastructure.

7. Data Sharing

We do not sell your data. It is only shared with:

Technical services required for operation (Supabase)
Competent authorities if required by law

8. Your Rights (GDPR)

Right of access to your data
Right to rectification
Right to erasure (right to be forgotten)
Right to data portability
Right to object to processing
Right to withdraw consent
Right to lodge a complaint with the CNIL

To exercise these rights, use the "Delete my account" feature in settings or contact us at contact@olympe.tech.

9. Data Retention

Your data is retained as long as your account is active. After account deletion, data is erased within 30 days.

10. Cookies and Tracking

The application does not use advertising cookies. Only necessary technical cookies are used.

11. Changes

This policy may be updated. You will be notified of any significant changes.