Privacy policy

Updated on 14 October 2026

This policy says what personal data Aycoo processes, why, who it passes through, how long it is kept, and how to exercise your rights. It applies to the aycoo.com site and the app.aycoo.com app. The French version prevails over this translation.

1. Data controller

Aycoo, reachable at hello (at) aycoo.com.

2. Data processed

• Account: email, first name, photo if you add one, password if you choose one (never stored in clear text).
• Organization: its name, its members (first name, email, field of work), its credits and its purchases.
• Sessions: your exchanges with the artificial intelligence, what you share with your team, the decisions and their verification, the team memory.
• Security: the devices connected to your account (browser and system type, sign-in and activity dates) and technical logs.
• Contact: what you write to Aycoo, from the site, the app or by email, with your address and, if you give them, your first name and your organization.

Do not share sensitive data in the service (health, opinions, banking data…) without need.

3. Who reads what

• Your exchanges with the artificial intelligence are read by you alone.
• Your team only receives what you choose to share, under the conditions the app shows before each share.
• Aycoo does not access the content of sessions for its day-to-day operations: it only follows counts and durations. It looks at content only when the security of the service, a legal obligation or your own request requires it.
• With the agreement of the person launching a session, the session may feed aggregated statistics, without any name.

4. Why, and on what basis

• Providing the service (accounts, sessions, emails, credits): the performance of the contract.
• Securing the service and preventing abuse: Aycoo's legitimate interest.
• Invoicing and keeping accounts: a legal obligation.
• Answering your messages: your request.

No data is sold, nor used for advertising.

5. Who your data passes through

Aycoo uses providers that process your data on its behalf, and only for that need. As of the update date:

• Hosting: Microsoft Azure. The app's data is stored in France.
• Artificial intelligence model: OpenAI or Anthropic, in the United States. What you write, and what the session gives it to answer you, is sent to it with each answer. Under these providers' terms for their API, these exchanges are kept for at most 30 days to detect abuse, unless the law requires otherwise, and are not used to train their models: OpenAI, Anthropic.
• Email sending: Resend.
• Payment: Stripe. Aycoo never has access to your card details.
• Aycoo's mailbox: Zoho.

Some of these providers are established in the United States or process data there. These transfers are covered by the safeguards the GDPR provides: the Data Privacy Framework or the European Commission's standard contractual clauses. Aycoo may change providers; this page is then updated.

Your data may also be disclosed to the authorities, where the law requires it.

6. How long data is kept

• Account, organizations and sessions: as long as your account exists.
• After your account is deleted, from the app and effective at the latest 30 days after the request: your account and your exchanges with the artificial intelligence are erased. What you shared with your team stays available to it, under your first name only, without your address.
• Purchases and invoices: for as long as the law requires for accounting records.
• Technical logs and backups: at most 30 days.
• At the artificial intelligence model provider: at most 30 days, as stated above.
• Messages sent to Aycoo: for as long as it takes to handle your request, then at most three years after the last exchange.

7. Cookies and browser storage

• The aycoo.com site sets no cookie.
• The app only uses what it needs to work: a cookie that keeps you signed in, and your display preferences, such as the language, kept in your browser.
• No advertising or audience measurement tracker. As these are strictly necessary to the service, they do not ask for your consent.

8. Security

Aycoo takes reasonable measures to protect your data: encrypted connections, restricted access, passwords never stored in clear text. As no system is infallible, a data breach that presents a risk would be reported to you as the law provides.

9. Your rights

You can access your data, correct it, have it erased, restrict its processing, object to it, and receive it in a reusable format. Some of this is done directly in the app (editing your profile, deleting your account). For the rest, write to hello (at) aycoo.com; the answer reaches you within one month. Proof of identity may be requested in case of doubt.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority.

10. Changes to this policy

This policy may change with the service or the law. The update date is shown at the top of the page; a significant change is announced by email or in the app.