Privacy Policy

This policy explains what personal data Utevia (“we”, “us”) collects, why, and the rights you have under the EU General Data Protection Regulation (GDPR).

Last updated: 2026-05-29

1. Data controller

Philippe Reynier, Wallonia, Belgium. Contact for any privacy question or request: info@utevia.com.

2. Data we collect

• Account data: your email address and a hashed (never plain-text) password.
• Billing data: your plan and subscription status. Card payments are handled by our payment processor; we do not store full card numbers.
• Usage data: the expressions you submit for evaluation, the engine and precision used, response times, trace identifiers, and timestamps.
• Technical data: IP address, browser/device information, and API-key identifiers.

3. Why we use it, and our legal basis

• To provide the service (accounts, evaluation, API access) and to bill you — performance of a contract (GDPR Art. 6(1)(b)).
• To keep the service secure, prevent abuse, enforce rate limits, and improve it — legitimate interests (Art. 6(1)(f)).
• To meet accounting and tax obligations for invoices — legal obligation (Art. 6(1)(c)).
• For optional marketing emails, where applicable — consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Retention

• Account data: kept while your account is active, then deleted within [e.g. 90 days] of closure.
• Billing and invoice records: kept for seven years, as required by Belgian accounting and tax law.
• Usage and technical logs: kept for [e.g. 12 months], then deleted or anonymised.

5. Sharing and processors

We do not sell your data. We share it only with service providers acting on our instructions (processors) — such as our [hosting provider] and [payment processor] — and with authorities where the law requires it.

6. International transfers

We aim to process your data within the European Economic Area (EEA). If any processor is located outside the EEA, such transfers are protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

7. Your rights

Under the GDPR you may: access your data; have it corrected; have it erased; restrict or object to processing; receive it in a portable format; and withdraw consent at any time. To exercise any right, email info@utevia.com.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels — www.autoriteprotectiondonnees.be.

8. Cookies and local storage

We use your browser’s local storage only to keep you signed in and to remember your preferences (selected engine, precision, output format). These are strictly necessary to operate the service and are not used for advertising or third-party tracking.

9. Security

We apply reasonable technical and organisational measures — including password hashing and encrypted (HTTPS/WSS) connections — to protect your data. No method of transmission or storage is ever completely secure.

10. Changes

We may update this policy; the “last updated” date above reflects the current version. Material changes will be announced on this page.

11. Contact

Questions or requests: info@utevia.com.