Privacy Policy
This English version is a translation of the French original, last updated on August 27, 2026. It is provided for your convenience. If the two versions differ, the French version prevails.
1. Data controller
The data controller for the processing of personal data carried out in connection with the Vulata service is Vultek, a simplified joint-stock company (SAS), whose registered office is located at 25 boulevard Gordon Bennett, 4e Rés. les Amaryllis, 63100 Clermont-Ferrand, registered under number 944 178 573.
Any question relating to data protection may be sent to contact@vulta.fr.
No data protection officer has been appointed, as the nature and volume of the processing do not require this appointment.
2. Data collected
Account data
Email address, password in encrypted form, account creation date.
Billing data
Name or company name, billing address, country, VAT number where applicable, history of subscriptions and invoices. Payment card data is collected and retained directly by Stripe. The publisher has no access to it and retains only the last four digits and the expiration date transmitted by the service provider.
Service usage data
Descriptions entered in the generation form, generated content, saved documents, layout settings, export history.
Technical data
IP address, browser type, operating system, pages viewed, connection dates and times, server event logs.
Data from trackers
See the Cookie Policy.
3. Purposes and legal bases
Purpose | Legal basis | Data concerned |
|---|---|---|
Account creation and management | Performance of the contract | Account data |
Provision of the generation and editing features | Performance of the contract | Usage data |
Subscription management, billing and debt recovery | Performance of the contract and legal obligation | Billing data |
Support and response to requests | Performance of the contract | Account data and usage data |
Security of the service, prevention of fraud and abuse | Legitimate interest | Technical data |
Improvement of the service and audience measurement | Consent | Data from trackers |
Sending of commercial information | Consent, or legitimate interest for customers regarding similar services | Email address |
Compliance with accounting and tax obligations | Legal obligation | Billing data |
4. Processing by artificial intelligence models
Content generation relies on an artificial intelligence model operated by Anthropic, acting as a processor.
The descriptions entered by the user are transmitted to this service provider for the sole purpose of producing the requested content. In accordance with this service provider's commercial terms, this data is not used to train its models and is retained by it for a limited period, for the sole purpose of detecting abusive use.
The user is invited not to enter sensitive personal data or confidential data in the generation fields.
5. Recipients and processors
The data is accessible to authorized persons within Vultek and to the following service providers, acting on the instructions of the data controller.
Service provider | Role | Data location |
|---|---|---|
OVH | Hosting of the service | France |
Stripe | Payment processing | European Union and United States |
Anthropic | Content generation | European Union and United States |
Brevo | Sending of emails | European Union |
Google Analytics | Audience measurement | European Union and United States |
Microsoft Clarity | Analysis of browsing behavior | European Union and United States |
Meta | Measurement of advertising conversions | European Union and United States |
The data is not sold, rented or transferred to third parties for commercial purposes.
6. Transfers outside the European Union
Some service providers may process data outside the European Union. These transfers are subject to the appropriate safeguards provided for in Chapter V of the General Data Protection Regulation (GDPR), in particular the standard contractual clauses adopted by the European Commission, supplemented where applicable by additional technical measures.
7. Retention periods
Data | Duration |
|---|---|
Account and usage data | Duration of the subscription, then twelve months after the account is closed |
Documents and generated content | Duration of the subscription, then thirty days after the account is closed |
Billing data | Ten years from the close of the fiscal year, pursuant to accounting obligations |
Technical logs | Twelve months |
Direct marketing data | Three years from the last contact |
Proof of consent to trackers | Six months |
At the end of these periods, the data is deleted or anonymized.
8. Rights of individuals
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, every individual has the following rights: the right of access, rectification, erasure, restriction of processing, objection and portability, as well as the right to define directives regarding what happens to their data after their death.
Where processing is based on consent, that consent may be withdrawn at any time, without this withdrawal affecting the lawfulness of the processing carried out previously.
These rights are exercised by writing to contact@vulta.fr. A response is provided within one month of receipt of the request. Proof of identity may be requested in the event of reasonable doubt as to the identity of the requester.
Every individual may file a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at www.cnil.fr.
9. Security
The publisher implements appropriate technical and organizational measures to protect the data against destruction, loss, alteration and unauthorized access. These measures include, in particular, the encryption of communications, the storage of passwords in hashed form, the segregation of access and the logging of events.
In the event of a data breach likely to result in a high risk to the rights and freedoms of the data subjects, the publisher informs the data subjects and the French data protection authority (CNIL) under the conditions provided for by the regulations.
10. Changes to this policy
This policy may be updated to reflect changes to the service or to the regulations. The date of the last update appears at the top of the document. Any substantial change is brought to the attention of users by email.