Politique de confidentialité

1. Introduction

This privacy policy describes how bibleo.ai collects, uses, stores and protects its users' personal data.

It applies to the use of the site, the content generation features, third-party integrations and connections via Google.

2. Data collected

Depending on the features used, we may collect the following categories of data:

Account data: email address, last name, first name, possible avatar, internal account identifiers
Authentication data: hashed password (not stored in plain text)
Usage data: generated content, preferences, settings, technical history related to use of the service
Technical data: IP address, browser, operating system, technical logs, pages visited
Payment data: information related to payments and subscriptions, processed securely by Stripe; we do not store bank card numbers
Google data: if you connect your Google account, we may collect certain basic profile data and the permissions granted for Gmail and Google Calendar

3. Connecting with Google

If you choose to log in or link your account with Google, we may access the following data according to the permissions you grant:

your Google email address;
certain basic profile information, such as your public name;
your unique Google identifier;
the permissions (scopes) validated during connection;
the OAuth tokens needed for the authorized features to work.

This data is used to create or link your account, keep your session logged in, enable sending emails on your behalf via Gmail if you have authorized it, and allow creating or modifying events in Google Calendar if you have enabled this feature.

4. Google scopes used

When you connect Google, bibleo.ai may request the following permissions:

openid: creating a secure link between your Google account and your bibleo.ai account
userinfo.email: access to your main email address
userinfo.profile: access to certain public profile information
gmail.send: sending emails on your behalf, only if you use this feature
calendar.events: creating and modifying events in your Google calendars, only if you use this feature

bibleo.ai does not use the Gmail permission to read the content of your inbox.

5. Use of data

We use your data to:

create, manage and secure your user account;
provide the main features of the service;
generate text and visual content at your request;
schedule certain automatic actions at your request, such as sending an email or creating an event;
send emails on your behalf via Gmail if you have explicitly connected this service;
create or modify events in Google Calendar if you have explicitly connected this service;
manage payments, credits, orders and subscriptions;
ensure technical monitoring, maintenance, security and improvement of the service.

6. Use of artificial intelligence

bibleo.ai uses third-party artificial intelligence services, in particular OpenAI, to assist with writing content and generating illustrations within the features offered on the platform.

The content sent to OpenAI may include user instructions, prompts, content prepared by the service's internal agents, as well as data needed for the requested generation.

Data from Google services (for example Gmail or Google Calendar) is not sent to OpenAI.

7. Sharing data with third parties

We do not sell your personal data. We may share certain data only with the providers necessary for the service to work, in particular:

Google: for authentication, sending emails via Gmail and managing Google Calendar events, according to the permissions you have granted
OpenAI: for AI-assisted generation features
Stripe: for secure processing of payments and subscriptions
Pexels: where applicable, for retrieving public media or visual resources
Technical hosting and maintenance providers: when necessary to run and secure the platform
Competent authorities: only if required by law

8. Data storage and retention

Generated images: images generated via the AI services may be kept on the server or database for a maximum of 48 hours, then automatically deleted by scheduled tasks
Temporary browser-side data: certain temporary data may be stored in the browser's localStorage for a maximum of 48 hours
Google OAuth tokens: kept as long as the Google connection is active or until revocation, disconnection or account deletion
Account data: kept as long as your account is active, unless required by law or justified technical necessity
Technical logs: kept for security, maintenance and traceability purposes for a proportionate period

Some deletions are carried out automatically by scheduled server-side tasks.

9. Data security

SSL/TLS encryption of communications;
secure hashing of passwords;
encryption of Google OAuth tokens stored on the server;
access to data limited to authorized persons or technical components only;
reasonable logging, control and protection measures against unauthorized access.

10. Google API Services data

bibleo.ai's use of data received via the Google APIs complies with Google's applicable use restrictions.

Data obtained via the Google APIs is used only to provide or improve the visible features requested by the user, such as account connection, sending emails on their behalf and creating or modifying calendar events.

We do not use the Google data obtained via these APIs for advertising, reselling data, or training a generalized artificial intelligence model.

11. Your rights

In accordance with applicable regulations, you can:

access your personal data;
request the rectification of inaccurate data;
request the deletion of your account and your data, subject to legal obligations;
request the export of certain data;
revoke bibleo.ai's access to your Google account at any time.

12. Revoking Google access

You can disconnect your Google account from your user area when this option is available, or revoke access directly from your Google account: myaccount.google.com/permissions.

13. Cookies and local storage

We use essential cookies and local storage mechanisms needed for the service to work, for authentication, session maintenance, user preferences and certain temporary processing.