Privacy Policy | Bidouchat.ai

Last updated : 14/11/2026

This document is a translation provided for the convenience of non-French-speaking users. Mandragore Planète is a French company (SAS) with its registered office in France, subject to French law. In the event of any discrepancy or conflict of interpretation between this translation and the French version, the French version alone shall prevail and shall be legally binding.

1. Data Controller

Bidouchat.ai is published by MANDRAGORE PLANÈTE, a French simplified joint-stock company (SAS) with a capital of €1,000, whose registered office is located at 15 rue des Halles, 75001 Paris, France (Paris Trade Register, SIREN No. 891 378 234). Mandragore Planète is the controller responsible for the processing of personal data collected on this site. For any question regarding your data, contact contact@bidouchat.ai.

2. Data We Collect

We apply a data minimization principle: we only collect what is strictly necessary for the service to function.

Account data: as of today, creating an account only requires your email address and a password (stored encrypted). We do not collect your name, surname, postal address, city, or phone number at sign-up.
Payment data: processed directly by our payment provider, Stripe. We do not collect or store any banking data on our servers.
Technical data: IP address, browser type, pages visited, via essential cookies and, with your consent, audience measurement cookies.
Service usage data: history of workspaces created, volume of credits used and topped up, and interaction logs with the conversational assistant, used for the operation and improvement of the service. Retained for 90 days (see section 5).
Content of your requests (prompts): the questions and instructions you submit to the conversational assistant are retained, linked to your customer account, for marketing analysis purposes — in particular to study the nature of your needs and improve our offering. Retained for 90 days (see section 5). See the legal basis for this processing in section 4 and your right to object in section 6.
Learning workspace only: when access is provided as part of a training workspace, a trainee identifier (reference number) and the associated credit volume are also recorded, to allow tracking of usage per trainee within the client organization.

3. Purposes of Processing

Creation, authentication and management of your user account
Provision of the service: access to workspaces, management and tracking of credits
Order processing and invoicing
Service improvement and audience measurement (with your consent)
Analysis of requests submitted to the conversational assistant for marketing purposes (studying customer needs, improving our offering) — see section 6 for your right to object to this processing
Tracking of usage per trainee for Learning workspaces (trainee reference number, credits used)
Fraud and abuse prevention, in particular misuse of the free Demo offer (see section 5)
Communication relating to your account or your purchases

4. Legal Basis

Processing is based on the performance of the contract (account creation, provision of the service, sale), consent (non-essential cookies), and the legitimate interest of Mandragore Planète (service security, fraud and abuse prevention).

The retention and analysis of the content of your requests (prompts) for marketing purposes is specifically based on Mandragore Planète's legitimate interest in better understanding its customers' needs to improve its offering. This processing does not involve any automated decision-making concerning you, and you may object to it at any time (see section 6).

5. Retention Period and Account Deletion

Your account data is retained for as long as your account is active, then archived or deleted in accordance with applicable legal obligations (in particular accounting and tax obligations for billing data).

The interaction logs and the content of your requests (prompts), referred to in section 2, are retained for a maximum period of 90 days, after which they are automatically deleted from our databases.

Account deletion: you may request the deletion of your account at any time, without justification, by contacting us at contact@bidouchat.ai.

Exception — Demo accounts: accounts created through the free Demo offer (100 credits included) cannot be deleted from our system. This measure is solely intended to prevent the creation of multiple accounts to repeatedly claim the free credits, to the detriment of the service's viability. It is based on Mandragore Planète's legitimate interest in preventing abuse. It does not apply to accounts that have made a purchase (Standard or Premium workspace), which can be deleted under the normal conditions described above. If you have a Demo account and still wish to exercise your right to erasure, please contact us: we will review your request on a case-by-case basis and may, at a minimum, anonymize the data associated with your account.

6. Your Rights

In accordance with the General Data Protection Regulation (GDPR), you have a right of access, rectification, erasure, restriction, portability and objection regarding your personal data. To exercise these rights, contact contact@bidouchat.ai. We are committed to responding to any request within a reasonable time and in accordance with legal requirements.

In particular, you may object at any time, without having to justify yourself, to the use of the content of your requests (prompts) for marketing purposes as described in section 2. This objection does not affect your access to the service in any way: it simply results in your exchanges being excluded from our marketing analyses.

You also have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL): www.cnil.fr.

7. Cookies

This site uses cookies essential to its operation (authentication, session) as well as audience measurement cookies subject to your consent. You may change your choice at any time via the link Manage my cookies.

8. Processors and Data Recipients

As part of the operation of the service, certain data is shared with:

Stripe — secure payment processing
Hostinger International Ltd. — hosting of the site and data
Where applicable, third-party artificial intelligence model providers used by the conversational assistant, strictly within the scope of operating the service

These providers only use your data to perform the services entrusted to them, in compliance with their own GDPR compliance commitments.

9. Security

We implement appropriate technical and organizational measures (password encryption, restricted access to data, secure hosting) to protect your data against any unauthorized access, loss or disclosure.

This document is a draft based on Bidouchat.ai's actual data collection practices as of the date indicated above. It must be reviewed and validated by a legal professional before final publication, in particular the clause in section 5 relating to Demo accounts, the validity of which must be confirmed with regard to the GDPR (notably its interaction with Article 17 on the right to erasure).