Privacy Policy

This English version is provided for convenience. In case of discrepancy, the French version prevails.

1. Data Controller

Comallagency LLC, 1209 Mountain Road Pl NE, Suite N, Albuquerque, NM 87110, United States, is responsible for the processing of personal data collected via the Service. Contact: contact@hermesagentfrance.com.

2. Data Collected

• Account data: name, e-mail address, password (stored encrypted/hashed, never in plain text)
• Agent configuration data: chosen first name, messaging channel, priorities indicated during activation
• Content of exchanges with the agent: messages you send to your agent are transmitted to the AI inference provider (see section 5) to generate responses — see also the liability limits in our Terms
• Billing data: managed and stored by our payment provider Stripe — we never store your bank details
• Content of exchanges with support (tickets, messages, any attachments)
• Technical data: IP address, connection logs, data necessary for your agent to function
• Site chat widget data (anonymous visitors, with or without an account): a session identifier and the predefined questions viewed — the widget answers from content already published on the site, with no call to an AI model and no data shared with a third party. If you use "Talk to a person", your e-mail and message are also retained so we can reply

3. Purposes of Processing

• Performance of the subscription contract (provision and operation of the Service)
• Billing and customer relationship management
• Technical support
• Service improvement and security

4. Legal Basis

Processing is based on the performance of the contract binding you to Comallagency LLC, on our legitimate interest (security, Service improvement), and, where applicable for non-essential cookies, on your consent.

5. Data Recipients

Your data may be shared with the following subprocessors and partners, strictly as necessary:

• Stripe — payment processing and billing data
• o2switch (France) — hosting of the application, database, and e-mail messaging for the Service
• Contabo (German company; the server used for your agent is physically located in France) — hosting of the dedicated server that runs your agent
• OpenRouter and the underlying artificial intelligence model providers to which OpenRouter routes requests — processing the content of your exchanges with your agent to generate its responses. The default model in use today is an OpenAI model (gpt-4.1-mini), with an Anthropic fallback model (claude-haiku-4.5) used if it's unavailable — verified directly with OpenRouter: neither model trains its systems on your data ("training: false"). These providers retain exchanges for a limited time for security purposes — 30 days documented for the fallback model (Anthropic); OpenAI doesn't publish an exact duration but applies the same no-training policy — never to retrain their models. The model actually active on your account is always shown in your client account (AI Model section).
• Nous Research — receives your agent's display name (including your first and last name) when your agent is connected to Telegram, as part of the automated creation of the bot dedicated to your account. Nous Research does not, however, have access to the content of your exchanges: we run their open-source Hermes Agent software on our own infrastructure, and the content of your conversations is never transmitted to them.

6. Retention Period

Your data is retained and your agent remains active for as long as your subscription is active. If your subscription is cancelled or an unpaid invoice is not resolved by the end of the grace period, your agent is suspended — stopped, with data retained but inaccessible — without this triggering automatic deletion. Permanent deletion of your data only occurs when you delete your account yourself (client account, Profile section, immediate effect) or upon request to contact@hermesagentfrance.com. You may request deletion of your data at any time (see section 7).

Site chat widget data (anonymous visitors — session identifier, questions viewed, e-mail and message if contacted via "Talk to a person") is retained for 12 months after the last exchange, independently of any account or subscription, then automatically deleted.

7. Your Rights

In accordance with the GDPR, you have the following rights over your personal data:

• Right of access and rectification
• Right to erasure
• Right to portability (export your data from your client account, Profile section)
• Right to object and to restriction of processing

You can exercise these rights directly from your client account (export and account deletion in the Profile section) or by contacting us at contact@hermesagentfrance.com. You also have the right to lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

8. Security

We implement reasonable technical and organizational measures to protect your data (password encryption, HTTPS connections, restricted access to data by our team).