Privacy Policy

Last updated: 7 October 2026

1. Who we are

Aisance Business (business.aisance.io) is operated by EuroAFF.com S.à r.l., 21 Rue du Puits Romain, L-8070 Bertrange, Luxembourg (RCS Luxembourg B280385, VAT LU35193630) (“we”, “us”). We are the controller for your account, billing and website data. Contact us at aisance.social@euroaff.com.

You decide which files to add and why. For personal data inside them, such as names on invoices, payslips or emails, we process the data on your behalf to provide the service. Contact us if you need a data processing agreement.

2. What we collect

• Account details: your name and email address (from Google if you sign in with Google), and the sign-in codes and session cookies that keep you signed in.
• Your folder: the files you add (PDFs, scans and photos, Office files and spreadsheets, emails and their attachments, and the files inside ZIP archives), the details our AI reads from them (such as the type of document, company and person names, dates, periods, amounts, currencies and reference numbers, with a short summary and notes on anything that needs your attention), and how you arrange, rename, move or mark them.
• Questions to the assistant: each question is sent with the details from your folder needed to answer it. We keep a daily count of questions, not the conversation, which stays in your open page.
• Your devices: an account is for one person, on a few of their devices. To apply that, each browser you sign in with keeps a random identifier in a cookie, and we record its browser and system (for example “Chrome on macOS”) and when it was first and last used. We don’t keep addresses or device fingerprints for this.
• Your last visit: when you last opened your folder, and when a paid plan ended, which decide how long an unused folder is kept (section 7).
• Billing: your subscription status and Stripe customer reference. Card details are entered on Stripe’s pages; we do not receive or store card numbers.
• Usage and security data: technical logs such as IP address, browser, timestamps and errors; how many of your files were read each month and what reading them cost each day; and the storage your folder uses.
• Sign-up measurement: the page you arrived on, the campaign parameters and ad click identifiers in the link (such as utm_source, utm_campaign, fbclid and gclid) and a random identifier stored in your browser.
• Advertising measurement, only with your consent: analytics and advertising cookies from Google and Meta, and — when you sign up, when your first files are read, and when you start or complete a payment — the event, a pseudonymised (hashed) copy of your email address and account ID, your IP address and browser, and the Meta cookie identifiers.
• Product analytics, only with your consent: which pages and steps you use (for example uploading, downloading or asking the assistant, with counts but never file names or contents), your account ID, and recordings of your sessions in which all text, entries, images and documents are hidden, so they show only where you click and scroll.
• OpenAI advertising measurement, when enabled and only after an explicit updated advertising choice: registration and the first paid subscription, a random conversion identifier, timestamp, ad click identifier and the subscription amount and currency. We do not send document contents, file names, email addresses, account IDs, IP addresses or browser details to OpenAI for advertising. No OpenAI advertising SDK runs in your folder. The click identifier is kept for up to 30 days. Reject advertising in Cookie settings to stop future events and cancel queued ones; events already transmitted cannot be recalled through this setting.
• Error reports: when something breaks, the error, the page and browser, and your account ID, without addresses in links, cookies, request contents or anything from your files.
• Support messages you send us.
• Feedback: the rating and words you send with Send feedback, what you use Aisance Business for if you say, and your plan and the number of files in your folder at the time. If you allow it, your review and the name and role you give for it.

3. Why we use it

• To provide Aisance Business: keep your folder, read your files with AI, sort the documents found into folders, answer your questions and let you download the organised folder. Legal basis: our contract with you (GDPR Art. 6(1)(b)).
• To take payments and keep accounting records. Legal basis: contract and legal obligation (Art. 6(1)(b) and (c)).
• To keep the service secure and reliable, apply fair use limits (such as one person per account), prevent abuse and fix errors. Legal basis: our legitimate interests (Art. 6(1)(f)).
• To understand which pages and campaigns lead to sign-ups and improve our offer. Legal basis: our legitimate interests (Art. 6(1)(f)). Where the law requires consent for storing identifiers in your browser, we ask for it.
• To measure which ads lead to sign-ups and payments, and to show our ads to people likely to need Aisance Business. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time under Cookie settings.
• To understand how Aisance Business is used and where people get stuck, with product analytics and session recordings in which all text is hidden. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time under Cookie settings.
• To find and fix errors. Legal basis: our legitimate interest in a working, secure service (Art. 6(1)(f)).
• To learn what to improve from your feedback. Legal basis: our legitimate interest in improving the service (Art. 6(1)(f)). Only if you allow it, to show your review on our website, word for word with the name and role you give. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time with Take it down under Send feedback, or by writing to us.
• To send service emails such as sign-in codes, billing notices and warnings before an unused folder is deleted. Legal basis: our contract with you.

We do not sell your data. We do not use your files to train AI models, and our AI providers may not use them for that either.

4. How AI reads your files

Each file you add that can contain a document (PDFs, pictures, Office and text files, emails) is sent to Claude, an AI model made by Anthropic, through Vercel AI Gateway, to find the documents in it and read their details. The assistant answers your questions the same way. Every request asks for zero data retention: the gateway sends it only to providers that have agreed with Vercel not to keep it after answering and not to use it for training — Anthropic itself, or the same Claude models run by Amazon Web Services or Google Cloud — and Vercel doesn’t keep it either. So that follow-up questions are answered quickly, the provider may hold a conversation with the assistant in memory for a few minutes, never in storage. Providers may still keep a request where the law requires it or to investigate misuse of their service.

AI can misread a document or put it in the wrong folder. Every document in your folder links to its original file, so check what matters against it.

5. Service providers

These providers process data on our instructions:

• Supabase — database, sign-in and file storage (Frankfurt, Germany)
• Vercel — website hosting and the server functions that read your files (Frankfurt region, with global content delivery), and Vercel AI Gateway, which passes files and questions to the AI model
• Anthropic, and Amazon Web Services and Google Cloud where they run Anthropic’s models — AI reading of your files and the assistant’s answers, with zero data retention (data may be processed in the United States)
• Stripe and Link — subscriptions and payments; for purchases Link acts as merchant of record and handles VAT, except on our offer page (/v2), where we sell and Stripe processes the payment
• Google (Google Analytics and Google Ads) and Meta Platforms Ireland (Meta Pixel and Conversions API) — website analytics and advertising measurement, only with your consent (in the United States, until you opt out; see section 10). Google and Meta may also use this data under their own terms as independent controllers.
• Mixpanel — product analytics and session recordings, only with your consent (stored in the EU)
• OpenAI — server-side advertising conversion measurement, when enabled, only after your explicit updated advertising choice. Data may be processed outside the EEA. These events are opted out of future user-level personalization. This does not change how your files are processed by the AI providers described in section 4.
• Sentry (Functional Software) — error reports (stored in the EU)
• Resend — sign-in and service emails, and passing your feedback to our support inbox (Ireland region)
• Cloudflare — domain name services

We may also disclose data when the law requires it.

6. Transfers outside the EEA

Some providers are based in, or access data from, countries outside the European Economic Area, including the United States. For these transfers we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses.

7. How long we keep data

• Your folder: your files, the details read from them and how you arranged them, until you remove them or ask us to close your account, and from 28 October 2026 no longer than this: on the free plan, a folder that isn’t opened for 30 days is deleted; when a paid plan ends, the folder is kept for at least 60 days and then as on the free plan. We email you a week and a day before (Terms, section 7), and keep a record of those emails and of the deletion, with their dates, while your account is open. Removing a file deletes its stored original, its identical copies and everything read from it. Uploads that didn’t finish are deleted after a day.
• Account details: while your account is open, and deleted within 30 days after you ask us to close it, unless we must keep them longer.
• Devices: while your account is open. A browser’s entry is removed when you sign out there; the cookie in your browser expires after 400 days.
• Usage counts (files read, reading costs, daily questions): while your account is open, to apply fair use and answer billing questions.
• Billing records: as long as Luxembourg accounting law requires, generally 10 years.
• Feedback: while your account is open. A review on our website comes down as soon as you take it down or your account is closed.
• Technical logs: normally no longer than 90 days.
• Advertising measurement: IP address, browser and Meta cookie identifiers are removed from our records after 30 days; conversion events without them are kept for campaign reporting for up to 26 months.

8. Your rights

You can ask to access, correct, delete or export your personal data, to restrict or object to its use, and to withdraw consent where we rely on it. Email aisance.social@euroaff.com. You can also complain to the Commission nationale pour la protection des données (CNPD) in Luxembourg, or to the data protection authority where you live or work.

9. Cookies and browser storage

Necessary cookies sign you in, keep your session secure, remember your cookie choice and identify your browser among the devices your account is open on (aisance_device, a random identifier kept for up to 400 days); they are always on. We also store a random identifier in your browser’s local storage to count visits and sign-ups by campaign.

Only if you allow them under Cookie settings, we also use (in the United States they run until you opt out, see section 10):

• Analytics: Google Analytics cookies (_ga) to measure visits and the sign-up and payment funnel, and Mixpanel (stored in your browser’s local storage) for product analytics and session recordings with all text hidden.
• Advertising: the Meta Pixel (_fbp, _fbc) and Google Ads (_gcl) cookies, a first-party cookie with the campaign that brought you (aisance_attr), and server-to-server reports of sign-ups, first files read and payments to Meta and Google, so we can measure our ads.

Outside the United States, none of these load until you choose. You can change or withdraw your choice at any time with the Cookie settings link at the bottom of our pages or in your account menu. We keep your choice for up to 6 months, then ask again.

10. United States: your privacy choices

If you visit from the United States, analytics and advertising cookies run from your first visit. Letting the Meta Pixel and Google Ads measure our advertising can count as “selling” or “sharing” personal information under some US state privacy laws, such as California’s. We don’t sell personal information for money.

• What is involved: online identifiers (cookie IDs, IP address, browser) and activity on our site (pages visited, sign-up, first files read and payment events), disclosed to Google and Meta for advertising measurement.
• How to opt out: use the “Do Not Sell or Share My Personal Information” link at the bottom of our pages and turn off Advertising. We also treat a Global Privacy Control signal from your browser as an opt-out: with it, advertising cookies don’t load.
• Your other rights: you can ask to know, correct or delete the personal information we hold about you by writing to aisance.social@euroaff.com. We won’t treat you differently for using these rights.

11. Security

Originals are kept in private storage, each account’s folder is isolated from other customers, the links your browser uses to open or download an original expire within two hours, and connections are encrypted.

12. Changes to this policy

When our processing changes we update this page and the date above. We tell you about significant changes by email or in the app.