Privacy policy

Data controller

The data controller is ANTISLASH STUDIO, SAS, 22 route de Durtol, 63530 Chanat-la-Mouteyre, France. For any question about your data: [email protected].

Data collected

QLOA collects only the data you voluntarily provide:

• via the assistant on the contact page: subject of the request, industry, website, name, company and business email address;
• via the assistant on the careers page: background, link to a profile and email address;
• via the QLOA assistant on the site: the questions you ask it;
• browsing data (pages viewed, visit duration, device type), only if you accept audience measurement, under the conditions described in the cookie policy.

Please do not provide sensitive data to the assistant.

Purposes and legal bases

• Responding to your request and arranging a demo: pre-contractual measures taken at your request.
• Reviewing an application: pre-contractual measures.
• Answering questions asked to the site assistant: QLOA’s legitimate interest in informing its visitors.
• Measuring site audience with Google Analytics: consent.

QLOA platform: Google sign-in and document access

Depending on the features enabled in the QLOA platform, a Google sign-in may be used for authentication or for access to Google Drive documents. Authentication uses the identity information required, such as the account identifier, the email address and, where the feature uses them, the name or profile picture. Document authorization is separate from this authentication. QLOA does not receive your Google password.

Document access lets QLOA view and process the resources available to the connected account, for the features you use. The data concerned may include file and folder names and identifiers, their metadata, and the content needed for viewing, syncing, searching or a document-based answer. Write operations apply only to features enabled with the corresponding permissions.

QLOA is committed to complying with the Google API Services User Data Policy, including its Limited Use requirements, for the use and transfer of information received from Google APIs. This commitment also applies to data derived from that information and to the providers that process it for the features described in this policy.

You can revoke Google authorization from your Google account. Disconnecting from the service and requesting erasure of data already stored are two separate actions. Results and answers may contain document excerpts saved in conversations. Revoking access does not by itself erase these excerpts, backups, or copies downloaded, exported or held by third parties. To exercise your rights or request erasure of data stored in QLOA, write to [email protected], specifying the organization and the resources concerned.

QLOA platform: indexing and artificial intelligence

To make documents searchable and answer requests, QLOA may extract their text, run text recognition on a scanned document, and store metadata, text passages and vector representations in a document index. This index is data retention, even when the original file is not kept as a binary copy.

AI processing may send questions, context and relevant excerpts to the services that run answer generation, embeddings, result ranking or voice features. The provider of the main model depends in particular on the organization, the agent and the feature used. This choice does not by itself determine the provider of embeddings, of other processing or of backup services. A backup service may receive the data needed for the same task when the main service does not respond.

Retention periods

Prospecting data is kept for three years from the last contact. Unsuccessful job applications are kept for two years with your consent. Questions asked to the assistant are kept for twelve months. Audience measurement data is kept for 14 months at most.

Recipients and processors

The data is intended for QLOA’s teams and its technical subprocessors:

• OVHcloud, host of the site and platform, in France;
• Anthropic, Google, OpenAI and Mistral AI, providers of the AI models, which process the questions asked to the assistant;
• Google Ireland Limited, for audience measurement, if you accept it.

Transfers outside the European Union

Some subprocessors, notably Anthropic, OpenAI and Google, may process data outside the European Union, in particular in the United States. These transfers rely on the EU-U.S. Data Privacy Framework or on the European Commission’s standard contractual clauses.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to set directives regarding what happens to it after your death. You can exercise these rights at the address given above. You may also lodge a complaint with the CNIL (cnil.fr).