Privacy Policy

This Privacy Policy describes how DARYL SAS (“DARYL”, “we”, “our”) collects, uses, retains and protects the personal data of visitors to daryl-ai.com and users of the DARYL SaaS Platform.

DARYL complies with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and with French Data Protection Act no. 78-17 of 6 January 1978, as amended.

The data controller is:

• DARYL SAS, share capital €10,000
• SIREN: 933 503 427 — Bordeaux Trade Register
• Registered office: Le Village by CA – 11 cours du 30 Juillet, 33000 Bordeaux, France
• Postal address: 33 avenue Condorcet, 33185 Le Haillan, France
• Email: contact@daryl-ai.com
• Publication director: Samuel Boury

We may collect the following categories of data:

• Identification data: first name, last name, job title, company, professional email address, phone number.
• Login data: usernames, passwords (encrypted), login history, IP address.
• Browsing data: pages visited, time spent, browser type, operating system, cookies (see section 8).
• Customer Content: documents, knowledge bases and domain data that the Customer voluntarily uploads to the Platform.
• Contractual and billing data: information related to subscriptions, quotes, invoices and payments.

Collected data is processed for the following purposes:

• Provision of the Services (contract performance): account creation, access to the Platform, technical support, billing.
• Management of the commercial relationship (legitimate interest / pre-contractual steps): responding to contact and demo requests, prospect follow-up.
• Feeding the Customer's knowledge base (contract performance): DARYL uses Customer Content to feed the knowledge base and AI features dedicated to the Customer. This data remains under the Customer's exclusive control and is never shared with other customers.
• Software improvement (legitimate interest): DARYL processes technical data and Platform usage statistics in a strictly anonymised and aggregated form to fix bugs, optimise performance and evolve features. No shared machine learning is performed on Customer Content.
• Marketing communications (consent): sending information about our services, newsletters, event invitations.
• Compliance with legal obligations (legal obligation): accounting records, invoicing, fraud prevention.

Personal data is accessible, within the scope of their respective duties, to:

• Authorised DARYL staff (commercial, technical and support teams);
• Our technical processors acting on DARYL's written instructions: hosting provider (Microsoft Azure France), email service provider, CRM tools, support providers;
• Administrative or judicial authorities where required by law.

DARYL does not sell or rent your personal data to third parties.

Data is hosted on secure servers located in France (Microsoft Azure France) and, for the institutional website, with OVH (Roubaix, France).

DARYL prioritises data processing and storage within the European Union. Where processors located outside the EU are used (in particular for certain AI models), DARYL frames such transfers through the Standard Contractual Clauses adopted by the European Commission or any other GDPR-compliant mechanism.

The retention periods applied are:

• Account data and Customer Content: for the duration of the contract, then archived for the period required by legal obligations (typically 5 years).
• Prospect data: 3 years from the last contact, unless objection.
• Billing data: 10 years (accounting obligation).
• Cookies: 13 months maximum.
• Login logs: 12 months.

The daryl-ai.com website uses cookies to ensure its proper operation, measure audience and, where applicable, personalise the user experience. On your first visit, a banner informs you about cookie use and lets you accept or refuse non-essential cookies.

You can change your preferences at any time via your browser settings or by resetting your choices on the site.

Under the GDPR, you have the following rights regarding your data:

• right of access and information;
• right to rectification of inaccurate data;
• right to erasure (right to be forgotten);
• right to restriction of processing;
• right to data portability;
• right to object to processing based on legitimate interest;
• right to withdraw consent at any time;
• right to set post-mortem directives.

To exercise these rights, contact us by email at contact@daryl-ai.com or by postal mail at our registered office. Proof of identity may be requested.

If, after contacting us, you believe your rights are not respected, you may file a complaint with the CNIL: www.cnil.fr.

DARYL implements state-of-the-art technical and organisational measures to protect your data against loss, alteration, unauthorised access or disclosure: encryption in transit (TLS), encryption at rest, access control, logging, regular backups and internal awareness training.

DARYL uses Customer Content to feed the knowledge base and AI features dedicated to each Customer. This knowledge base is composed solely of the relevant Customer's data and remains under that Customer's exclusive control for the duration of the contract.

DARYL does not perform shared machine learning on Customer Content. Customer Content is never used to feed models of other customers or generic models. It is not shared, transferred or resold to third parties.

For continuous software improvement (bug fixes, optimisation, feature evolution), DARYL may use Platform usage statistics and technical data in a strictly anonymised and aggregated form.

The Customer may at any time export, restrict or request deletion of its Content under the conditions set out in section 9 “Your rights” and the “Reversibility” clause of the Terms of Sale.

DARYL reserves the right to modify this Privacy Policy at any time, in particular to reflect legal or technical changes. The last update date is shown at the top of the document. In the event of substantial changes, affected users will be informed by email or via the Platform.

For any question about this Policy or about the protection of your data, please write to: contact@daryl-ai.com.