Privacy policy
Last updated: October 14, 2026
This English version is provided for convenience. The French version is the legally binding one and prevails in case of discrepancy: read it in French.
In short. Your data is hosted in France. No advertising, no audience measurement trackers, no reselling. We keep what is needed for your account, your projects and billing. The AI only receives data if you turn it on yourself.
1. Data controller
Flopix, the trading name of the sole proprietorship (entreprise individuelle) operated by Vincent PIERNOT, whose place of business is at 3 rue Amiral Guépratte, 57070 Metz, France, registered with the Metz Trade and Companies Register (RCS de Metz) under number 928 185 420 ("Flopix"). Contact for any question about your data: [email protected].
For the content users upload to their projects (which may contain third-party data: names, contact details, documents), it is the customer organisation that decides what it puts there and who can access it. Flopix then processes that content solely on the organisation's behalf, in order to provide the Service, as a processor within the meaning of Article 28 of the GDPR.
2. Data processed
| Category | Data |
|---|---|
| Account | Name, email address, password (hashed, never readable), preferences, sign-up and login dates. |
| Security | Two-factor authentication secret (encrypted), login sessions with the type of device ("Chrome on Windows") and the last activity date, password reset and email change requests. |
| Organisations and projects | Organisations, roles, invitations, projects, tasks, comments, notes, drawings, events, documents, links, "To read" items and who has read them, dashboards. |
| Activity | History of actions in projects (who did what and when), notifications. |
| Payment | Plan, subscription status, Stripe customer and subscription identifiers, invoices. Card data is processed by Stripe and never passes through our servers. |
| AI (optional) | Your Anthropic API key (encrypted) and a monthly action counter. Flopilot does not keep the text sent to the AI; only the result you choose to insert is saved in your project. |
| Connections (optional) | Access tokens for the applications of the Flopix family (encrypted). |
| Google Drive (optional) | If you link your Google account to edit a document in Google: your Google address and an access authorisation (encrypted), limited to the files Flopilot itself creates in your Drive. |
| Contact and website assistant | Messages sent through the Contact page form (name, email, subject, message) and messages written in the AI assistant bubble of the public pages (see section 4; no conversation is kept). |
| Correspondence | Messages you send us by email. |
| Technical | IP address, browser, pages requested, date and time (server logs). |
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, providing the Service (projects, sharing, documents, dashboards, reminders) | Performance of the contract |
| Service emails: address confirmation, forgotten password, invitations, reminders, subscription information | Performance of the contract |
| Security of the Service: two-factor authentication, prevention of abuse and intrusions, technical logs | Legitimate interest and performance of the contract |
| Billing and accounting | Legal obligation |
| AI features and connections to Flopix applications, only if you turn them on | Performance of the contract, at your request |
| Replying to your messages, support | Legitimate interest |
| Monitoring how the Service runs using overall figures (number of accounts and projects, storage volume) | Legitimate interest |
No marketing without your consent, no advertising profiling, no automated decision producing legal effects concerning you.
4. Recipients and processors
Your data is accessible to authorised Flopix staff, to the extent they need it, and to the people you give access to your projects (depending on their role). We use the following processors:
- OVH SAS (Roubaix, France): hosting of the Service, on a server located in France.
- Stripe (Stripe Payments Europe Ltd, Ireland): subscription payments, invoicing, subscription management portal.
- Our email delivery provider: delivery of service emails (confirmation, invitations, reminders).
Services you choose to use:
- Anthropic (Anthropic PBC, United States), only if you turn on the AI with your own key: when you run an AI action, the text concerned is sent to Anthropic with your key, under your responsibility, and processed in accordance with Anthropic's terms and privacy policy, which are linked to your Anthropic account. This data then leaves the European Union.
- The applications of the Flopix family (same publisher), only if you connect them: Flopilot reads the data displayed in your widgets (for example your website's visits or the carousels awaiting approval).
- Google (Google Ireland Ltd), only if you link your Google account to edit a document: the file is copied to YOUR Google Drive for editing, then brought back into Flopilot when you ask. It is then processed under your Google account's terms.
- The AI assistant of the public pages (the bubble at the bottom right of the website): it is provided by Flopia, Flopix's AI service, which relies on Claude, by Anthropic (United States). Only the messages you type in it and the context needed to answer are sent, never the content of your projects. The bubble keeps no conversation; only counters (number of messages, cost) are used to prevent abuse. Under Anthropic's commercial terms, these messages are not used to train its models (terms, privacy). Do not type sensitive information in it.
Finally, administrative or judicial authorities when the law requires it. We do not sell or rent out any data.
5. Transfers outside the European Union
The Service is hosted in France. Stripe may process some data in the United States, under the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses. If you turn on the AI, the text you send is processed by Anthropic in the United States, on your initiative and with your own key. Messages written in the website's assistant bubble are also processed by Anthropic in the United States; this transfer is covered by the standard contractual clauses provided for by the GDPR.
6. Retention periods
- Account, organisations and projects: as long as the account exists. An organisation without a subscription is kept in read-only mode until you request its deletion. After a deletion request, data is erased within 30 days.
- Inactive account (no login and no active subscription for 3 years): you are notified by email, then the account is deleted if it is not reactivated.
- Login sessions: 30 days at most.
- Activity history: viewable for a period ranging from 30 days to 2 years depending on the plan, erased after 10 years at the latest.
- Read notifications: 90 days. Unaccepted invitations: 30 days after they expire.
- Connection tokens for Flopix applications and AI key: until you remove them, or until the account is deleted.
- Billing: 10 years (Article L123-22 of the French Commercial Code).
- Messages exchanged with us: 3 years after the last exchange.
- Technical server logs: 12 months at most.
7. Cookies
A single, strictly necessary cookie (flopilot_sid, to keep you logged in), and local storage for your display preferences. If you write to the website's AI assistant, an identifier (flopia_chat_session, local storage) is created with your first message to prevent abuse: strictly necessary for that service, it does not require consent. No advertising or audience measurement cookies. Details on the Cookies page.
8. Security
Encrypted connections (HTTPS), hashed passwords (scrypt), AI keys, connection tokens and two-factor authentication secrets encrypted (AES-GCM), two-factor authentication available, roles that restrict access to projects, and server access that is restricted and protected by key.
9. Your rights
You have the right to access, rectify, erase, restrict the processing of, object to the processing of and port your data, as well as the right to set instructions on what happens to it after your death. To exercise these rights, write to [email protected] from your account's email address. We reply within one month. Much of your data (name, preferences, content) can also be edited directly in Flopilot.
If you are a guest or a member of an organisation, requests concerning that organisation's content may also be sent to its owner.
If you believe your rights are not being respected, you can lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés, the French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr.
10. Changes
This policy may change as the Service evolves. Significant changes are announced by email or in Flopilot.