Roles
For customer content, the customer is usually the controller and PrivaAI acts as processor under the DPA. For account, support, security and billing data, PrivaAI may act as controller.
Legal
Privacy Policy
For customer content, the customer is usually controller and PrivaAI is processor under the DPA.
Translated draft: the Dutch legal text remains controlling until legal review is complete.
PrivaAIEU-first
EU-first processing
Subprocessors
Retention
Data subject rights
Translated version. The Dutch text remains controlling until legal review is complete.
Data and location
Product data, documents, prompts, output, embeddings and audit evidence are processed through the EU-first Scaleway stack in France. Customer content is not used to train AI models.
Retention
Data is retained as needed for the service, security, auditability, billing, legal duties and reasonable backup periods.