Privacy Policy

1. Data Controller

Athanor Studio is the data controller for the personal data collected through Athanor Orbit.

2. Data We Collect

We collect the following categories of personal data:

Account Information

• Username and password (encrypted)
• Email address (if provided)

Usage Data

• Carousel templates and generation history
• Text content added to carousels
• Service usage patterns and preferences

Google Drive Data

• Google Drive folder URLs you provide
• Images accessed from your connected Google Drive folders

Technical Data

• IP address and browser information
• Session data and cookies

3. Purpose of Processing

We process your personal data for the following purposes:

• Service provision: To provide and maintain the Athanor Orbit service
• Authentication: To verify your identity and secure your account
• Carousel generation: To create and store your carousel templates
• Service improvement: To analyze usage patterns and improve the service
• Communication: To respond to your inquiries and provide support

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Contract performance: Processing necessary to provide the service you requested
• Legitimate interests: To improve our service and ensure security
• Consent: Where you have given explicit consent for specific processing activities

5. Data Retention

We retain your personal data for as long as necessary to provide the service and fulfill the purposes described in this policy:

• Account data: Retained until you request account deletion
• Carousel templates: Retained until you delete them or close your account
• Generation history: Retained for 12 months
• Technical logs: Retained for 30 days

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time for consent-based processing

To exercise any of these rights, please contact us at guillaume@athanor-studio.io.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit using HTTPS/TLS
• Secure password hashing
• Access controls and authentication
• Regular security assessments

8. Third-Party Services

Athanor Orbit integrates with the following third-party services:

• Google Drive: To access images from your connected folders. Subject to Google's Privacy Policy

We do not sell your personal data to third parties.

9. Cookies

We use essential cookies necessary for the operation of the service:

• Session cookies: To maintain your login session
• CSRF tokens: To protect against cross-site request forgery

We do not use tracking or advertising cookies.

10. International Transfers

Your data is primarily processed within the European Union. If data is transferred outside the EU, we ensure appropriate safeguards are in place in compliance with GDPR requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this policy.

12. Complaints

If you have concerns about our data processing practices, you have the right to lodge a complaint with the French data protection authority:

13. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us: