Scope
This policy applies to the godia.ai website, the client portal, our commercial relationships and support.
When a client uses the platform for its own conversational agents, the client is the controller of its visitors' data and Godia.ai acts on its behalf as a processor. This processing is governed by our Data Processing Agreement (DPA) and by the client's own privacy policy.
Data controller
777 Industries Luxembourg S.à r.l., publisher of Godia.ai, 161, rue du Kiem, L-8030 Strassen, Luxembourg (RCS B302454). Data protection contact: legal@godia.ai.
Godia.ai has not appointed a data protection officer, as the conditions of Article 37 GDPR are not met.
Data we process
- Visitors of godia.ai
Technical browsing data and, only with your consent, audience measurement (see the cookie policy). Messages exchanged with the website assistant, if you use it.
- Prospects and clients
Name, email address, phone number, company, job title, commercial and support exchanges, billing information.
- Client portal users
Identity, business email address, role, account settings and login records (IP address, device, date).
- Visitors of our clients' agents
Messages exchanged, language, date, random technical identifiers, truncated IP address and approximate country. This data is processed on behalf of the client, which remains the controller.
Purposes and legal bases
- Providing the service and support
Performance of a contract (Article 6(1)(b) GDPR): portal access, operation of the agents, assistance.
- Security and abuse prevention
Legitimate interest (Article 6(1)(f)): login records, request rate limiting, detection of intrusion attempts.
- Commercial relationship
Legitimate interest in presenting our services to professionals, which you may object to at any time; consent where the law requires it.
- Website audience measurement
Consent (Article 6(1)(a)), collected through the cookie banner and withdrawable at any time.
- Legal obligations
Accounting and invoicing (Article 6(1)(c)).
Artificial intelligence
Agent replies are written by Mistral AI language models, called through Mistral AI's European endpoint. Use of the data for model training is disabled, and Mistral AI does not keep conversation content once the reply has been produced (zero data retention).
No decision producing legal effects or significantly affecting you is taken by automated means (Article 22 GDPR).
Transfers outside the European Union
Platform data is hosted and processed in the European Union. Transfers to the United States only take place for the Google and Microsoft services listed above, and only if you use them; they are governed by the European Commission's Standard Contractual Clauses.
Retention periods
- Agent conversations: period set by each client, then automatic deletion.
- Login and access records: 90 days; portal activity records: 30 days.
- Client accounts: duration of the contract; data deleted no later than 60 days after it ends.
- Prospects: 3 years after the last contact.
- Accounting records: 10 years, as required by Luxembourg law.
- Encrypted backups: rolling window of our database provider.
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, and the right to withdraw your consent at any time. Write to legal@godia.ai: we reply within one month.
For a conversation with one of our clients' agents, please contact that client first, as the controller; we assist them.
You may lodge a complaint with the Luxembourg data protection authority (Commission nationale pour la protection des données, CNPD): cnpd.public.lu.
Security
Encrypted connections, separation of each client's data, access control, two-factor authentication, logging and encrypted backups. Details: security policy.
Minors
Our services are not intended for children. If you believe a minor has provided us with data, contact us so that we can delete it.
Changes
We may update this policy; the date of the last change appears at the top of the page. In case of a significant change, we will inform you appropriately.
Contact
Data protection: legal@godia.ai · Support: support@godia.ai