Privacy policy | Comptoir AI

Who this covers

Comptoir AI is published by NGL Création, Christophe Negrel, 6 boulevard du 11 Novembre, 83330 Le Beausset, France ("we"). For any question about your data: [email protected].

This policy applies to:

visitors of merchant sites who write to the Comptoir AI assistant, in a site's chat, on WhatsApp or through a contact form it answers;
merchants, our customers, who install the plugin on their site;
visitors of comptoirai.com.

Two different roles

The merchant is responsible for the conversations held on their site. The merchant installs Comptoir AI and chooses the open channels (chat, WhatsApp, forms), the retention period and the connected tools (shop, calendar, accommodation booking). The merchant's own terms and privacy policy apply to their customers.

We act on the merchant's behalf, as a processor, when a message passes through our service to obtain the AI model's reply. We use these messages for no other purpose.

We are the controller for the data of our merchant customers (account, subscription, usage) and for visitors of comptoirai.com.

What the assistant processes when you write to it

Your messages and the assistant's replies.
What you choose to tell it in order to be served: first name, email address, phone number, postcode, delivery address, preferences. The assistant asks for them one at a time, when they are useful, and never fills any in for you: information you did not write is rejected by the plugin.
The context of your visit to the merchant's site: cart contents, order placed, appointment or stay booked, tracking of an order you ask about.
A visitor identifier kept in a technical cookie on the merchant's site (comptoir_vid), used only to find your conversation again. It is neither used for advertising nor shared.
On WhatsApp, your phone number, which WhatsApp sends with each message.
Through a contact form, the name, email address and message you entered.

What the assistant never processes:

No payment card data. You enter your card in Stripe's fields or on the merchant's payment page; no card number ever passes through Comptoir AI, its fields or its logs.
No passwords. A customer account is created at checkout, by the merchant's site.
No health questionnaire answers in plain text. When a care centre asks the questions of its booking form before an appointment, your answers are encrypted for the time of the booking and then erased, and masked in the conversation history. These questions are only asked after your explicit, timestamped consent.

Why

The data is used to answer and serve you: recommending a product or service, preparing a cart, an order, an appointment or a stay that you confirm yourself with a button, tracking an order, passing your request to a person on the merchant's team when you ask.

The merchant determines the legal basis for this processing. Most often it is steps taken at your request before a contract or the performance of your order, and, for health data, your consent.

Your messages are not used for advertising, for profiling, or to train an AI model. We sell no data.

Where your messages go

To the merchant. The conversation is stored in the database of the merchant's WordPress site, at the merchant's hosting provider.
Through our relay, to obtain the model's reply. The relay runs on Cloudflare's infrastructure. It passes the message and the necessary context to the model, returns the reply, and stores no content: it keeps only measurements (date, model, token count, cost, duration, response code) for billing and quotas.
To Anthropic, which provides the Claude model. Anthropic processes the message to produce the reply, does not use it to train its models and keeps it only for the period set by its commercial terms, for the security of its service.

A merchant on the Own key plan uses their own Anthropic account: their messages do not pass through our relay.

On WhatsApp, messages arrive through Meta's WhatsApp Business API. Our relay forwards them to the relevant merchant's site without storing them.

What we process for our merchant customers

Business or shop name, site domain, plan, trial and subscription dates.
Monthly usage: number of conversations, calls, tokens, cost, quota alerts.
A technical log of calls, without any conversation content.
Technical identifiers of the services the merchant connects: licence identifier, WhatsApp Business number and account identifiers, access authorisation for the Google Business Profile (to display reviews).
Our email exchanges.

The token linking a site to our service is never stored in plain text: we keep only a hash of it. Keys and secrets entered in the plugin (Stripe, SmartAgenda) stay on the merchant's site, encrypted.

This processing is based on our contract with the merchant and on our legitimate interest in the security and billing of the service.

The comptoirai.com website

This site sets no cookies, includes no audience measurement tool and loads no third-party script. Its host, Cloudflare, keeps technical logs (IP address, date, page requested) for the security of the service. When you write to us, your address and message are used only to reply to you.

Our providers

We only use the providers the service needs, each bound by a contract governing the data:

Anthropic, PBC (United States): Claude AI model.
Cloudflare, Inc. (United States, global network): relay, usage database, hosting of comptoirai.com.
Meta Platforms (WhatsApp Business): only if the merchant opens the WhatsApp channel.
Google (Business Profile): only if the merchant connects their profile, to read its public reviews.
Freemius: licence and subscription management, once online subscription opens.

The merchant's own tools (host, WooCommerce, payment gateway, SmartAgenda calendar, MotoPress, email sending plugin) are the merchant's providers, for which the merchant answers to their customers.

Transfers outside the European Union

Anthropic and Cloudflare process data in the United States. These transfers rely on the EU-US Data Privacy Framework for providers certified under it, or on the European Commission's standard contractual clauses.

How long

Conversations on the merchant's site: 30 to 90 days after the last message, depending on the merchant's setting (60 days by default), then automatic deletion. The comptoir_vid cookie lasts as long.
Information given to the assistant (first name, email, postcode…): 7 days in the conversation's memory, unless it appears in an order or booking, which then belongs to the merchant.
Consent given before a health questionnaire: 30 days.
Proof of a deposit paid online for an appointment: 5 years, on the merchant's site, to evidence the payment, unless you erase the conversation.
Draft reply to a contact form: 8 days.
Link to resume a conversation sent by email: 30 days.
Our relay's technical log: 90 days. Monthly usage: for the duration of the subscription, then deleted when the account is closed, except billing records, kept for the legal period.
comptoirai.com logs: according to Cloudflare's retention period.

Backups of the merchant's database may contain an erased conversation until they are replaced.

Security

Encrypted connections (HTTPS) at every step, site token stored as a hash, secrets encrypted in the merchant's database, no conversation content in our logs, administrative access restricted to the publisher.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time.

Erase a conversation yourself: from the site's chat, with the erase buttons of the assistant panel. The full procedure is on the Data deletion page.
For anything else, contact the merchant whose site you used, or write to us at [email protected]: we handle what concerns us and forward to the merchant what concerns them.
On WhatsApp, send "STOP" to receive no further messages.

You may lodge a complaint with the CNIL (www.cnil.fr) or with the data protection authority of your country.

Data received from Meta

Data received through the WhatsApp Business API (phone number and messages; the profile name sent by WhatsApp is not stored) is used only to reply to the person writing, on the merchant's behalf. It is not sold, not used for advertising, and not passed to anyone other than the providers listed above. Its deletion is requested as described on the Data deletion page.

Changes

We update this page when the service changes. The update date appears at the top of the page; a significant change is announced to merchants by email.