FAQ

All data is stored on Scaleway's servers in France, within the European Union. Your data never leaves Europe.

We use AES-256 encryption for data at rest and TLS 1.2+ for all data in transit. Encryption keys are managed with strict access controls.

No, never. Customer data is never used to train, fine-tune, or improve any AI models. Your roleplay sessions and training data are used solely to deliver your service.

Data retention is customer-controlled. Our standard practice is to completely anonymize all session data after 30 or 90 days. You can also request immediate deletion at any time.

Yes, we support SSO. Auth0 supports SAML, OpenID Connect, and other enterprise identity protocols.

Yes, fully. We operate as a data processor under GDPR and implement all required technical and organizational measures. We maintain Data Processing Agreements with all customers and sub-processors.

Yes. Our AI systems are designed with transparency, fairness, and human oversight in accordance with the EU AI Act. Users are always informed they are interacting with AI.

We have established incident response procedures. In the event of a data breach, we will notify affected customers within 72 hours as required by GDPR, along with details of the incident and remediation steps taken.

Our primary sub-processors are Scaleway (hosting and AI models, France), Auth0 (authentication, EU), and Stripe (payments). See our sub-processors page for full details.

Yes. Under GDPR, you have the right to erasure. You can request complete deletion of your data at any time by contacting us, and we will process your request promptly.