Privacy policy
This page is a translation provided for convenience. Only the French version is legally binding: read it in French.
Your chats are private. Here's exactly what we do with them, and what we never do.
Last updated: October 25, 2026
1. Who is responsible for your data
The data controller is Josselin Biot, a sole trader operating under the name Drift Studio, 12 rue des Carrières, 95300 Pontoise, France (SIREN 108 603 648). For any question: contact@driftstudio.app.
2. What we process
- The chat file you import. It is read and analyzed directly in your browser: the stats (number of messages, reply times, emojis…) are computed on your device.
- An excerpt of the chat (text messages with sender name and timestamp, no photos or voice notes), sent to our AI provider solely to write your report.
- Your answers to the questionnaire (type of chat, your name in the chat, your question, the tone you picked).
- Your email address, if you provide it, to send you the link to your report.
- Payment data, processed directly by our payment provider: we never see your card number.
3. Why, and on what legal basis
- Producing and delivering the report you request: performance of a contract.
- Collecting payment and keeping our accounts: legal obligation.
- Answering your support requests: legitimate interest.
We never: sell or rent your data, use it for advertising, train AI models on your chats, or contact the people in the chat.
4. The people in your chat
Your chat contains other people's messages. By importing it, you confirm you have the right to share it and that you're using it for personal purposes. Never import a chat obtained without someone's knowledge. Their messages are processed with the same safeguards as yours, and only to write your report.
5. How long we keep things
- The imported file isn't stored on our servers: it stays in your browser and disappears when you close the tab or click “Delete”.
- We don't store the excerpt sent to the AI separately. The report, its stats, your answers and any email address are kept in Convex for 30 days, then automatically deleted.
- Billing data is kept for 10 years (accounting obligation).
- Support conversations are kept for 3 years maximum.
6. Our service providers
- Anthropic PBC (United States): the AI model that writes the report. Data sent through its API isn't used to train its models.
- Cloudflare, Inc. (United States): website hosting.
- Convex, Inc. (United States): secure report database; reports are deleted after 30 days.
- Resend, Inc. (United States): transactional emails and, only with your consent, marketing emails.
- PostHog Inc. (EU servers, Frankfurt): anonymous, cookieless audience measurement. No chat content is ever sent.
- Whop, Inc. (United States): payments and billing.
Transfers outside the European Union are covered by the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
7. Cookies
The site uses no advertising cookies. Audience measurement (PostHog, hosted in the EU) works without cookies or any storage on your device, anonymously and for our own use only. Only your browser's session storage is used to keep your chat and report during your visit; it's cleared when you close the tab. If you pick a language, a technical cookie (NEXT_LOCALE) remembers it.
8. Minimum age
The service is reserved for people aged 18 and over.
9. Your rights
You can access, correct or delete your data, request its portability, object to processing or request its restriction. Write to contact@driftstudio.app; we reply within 30 days. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
See also the legal notice and the terms.