Privacy Policy

The controller is ROBONEX SAS, Société par actions simplifiée, share capital 2,000 €, registered with the RCS Auxerre under SIREN 103 902 151, registered office at 29 Rue du Moulin du Président, 89000 Auxerre, France. This policy covers the public website, accounts, billing, customer support and use of RoboNex AI. It is separate from the Business and Consumer Terms.

Account registration requires only the details identified in its form. Activity category, professional-purpose declaration, timestamp, locale and Terms version are required only when preparing a paid order. Billing name, address and optional tax ID are collected through Stripe Checkout when applicable. Payment card data is handled by Stripe; RoboNex receives transaction references and billing status rather than full card credentials.

• Identity, contact, account, organization and authentication data.
• Activity category and versioned professional-purpose and contractual-acceptance evidence.
• Billing identity, address, country, optional tax identifier, invoices and payment status.
• Usage totals, RoboCredits, endpoint and model category, timestamps and transaction references.
• Prompts, submitted content and generated output when required to deliver the requested AI service.
• Device, IP, security, diagnostic, audit and abuse-detection logs.
• Support, sales, privacy and legal communications.

RoboNex processes account, service, billing and support data to perform the contract or take requested pre-contract steps; invoices, tax and compliance records to meet legal obligations; security, service reliability, fraud prevention and proportionate product improvement for legitimate interests balanced against individual rights; and non-essential cookies or marketing only with consent where required.

Prompts and content are routed to the service-provider category needed to answer the request. Usage and technical logs support metering, debugging, security and abuse detection. Automated signals may flag suspicious activity or temporarily protect the service, but material account action is reviewed or may be challenged through support. Depending on the selected model and provider, prompts and related content may be processed outside the European Economic Area under the safeguards described in the “Transfers outside the EEA” section below.

Access is limited by role to authorized RoboNex personnel and provider categories needed for the service: cloud hosting and infrastructure, authentication and email, payment and invoicing, monitoring and security, customer support, and AI model/inference providers. Information about the processors used for these services is available from contact@robonex.fr.

Some provider categories may process data outside the European Economic Area. Where required, RoboNex must use a valid transfer mechanism such as an adequacy decision or European Commission standard contractual clauses, with supplementary measures and transfer assessment where appropriate. Contact RoboNex for information relevant to a particular transfer.

Account and contract data are retained for the active relationship and afterwards according to applicable legal limitation, accounting and dispute requirements. Billing records follow applicable accounting and tax obligations. Prompts, output, usage, security and support records are retained according to criteria tied to service delivery, metering, security, support and legal claims. Further information about the applicable retention criteria is available from contact@robonex.fr.

Subject to applicable conditions, individuals may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests, and may withdraw consent without affecting prior lawful processing. Requests may be sent to contact@robonex.fr or the registered office. Identity verification may be necessary. Individuals may also complain to the CNIL or their competent supervisory authority.

RoboNex uses technical and organizational measures intended to protect personal data, including access controls, authentication, logging and environment separation appropriate to the service. No absolute security or certification is claimed.

Material changes are dated and communicated where required. A new purpose incompatible with the original purpose requires a valid legal basis and appropriate notice or consent.