This Privacy Policy explains how Ekoal (“we”, “us”) collects, uses, and protects personal data when you use Ekit Studio (the “Service”) and this website.
1. Data controller
The data controller is: Ekoal — contact: contact@ekit.app.
For the websites you build with Ekit Studio and the data you store in your projects, you are the data controller and Ekoal acts as your processor (see section 8).
2. Data we collect
We may collect the following categories of data:
- Account data: name/username, email, password hash (never your plain password).
- Usage data: pages viewed, feature usage, approximate location (country/region when available), device and browser information.
- Activity data: actions in the Studio (sign-in, projects, tables, entries, sites…), used to operate, secure and improve the Service.
- Technical data: IP address (processed by our analytics/hosting providers), logs, timestamps, error diagnostics.
- Payment data: handled by our payment provider (e.g., Stripe). We do not store your full card number.
- User content: data you upload or create in the Service (projects, content, settings, etc.).
3. Purposes and legal bases
We process data for the following purposes:
- To provide and operate the Service (contract performance).
- To improve the Service, performance, and user experience (legitimate interests).
- To secure the Service, prevent abuse and fraud (legitimate interests / legal obligations).
- To manage billing and subscriptions (contract performance).
- To communicate with you (support requests, service messages) (contract performance / legitimate interests).
- To provide the AI features you choose to use, such as translation, the AI site generator and the AI assistant (contract performance).
- To comply with legal obligations (legal obligation).
4. Analytics and cookies
We may use analytics tools (e.g., Google Analytics) on Ekit Studio to understand usage and improve the Service. See our Cookies Policy for details and choices.
The audience statistics of the websites you build with Ekit are measured by our own analytics, without cookies and without third-party tracking scripts.
5. Data retention
We retain personal data only as long as necessary for the purposes described above:
- Account data: for the duration of your account, then limited retention as required by law or for dispute handling.
- Activity log (actions in the Studio): 13 months, then automatically deleted.
- Logs and security events: typically 7 days.
- AI assistant conversations: the conversation context is kept for up to 24 hours to answer follow-up questions.
- Billing records: as required by applicable accounting/tax laws.
6. Data sharing (processors)
We may share data with trusted processors strictly to operate the Service, such as:
- Hosting / infrastructure: OVH - France
- Analytics: Google Analytics (Ekit Studio)
- Email delivery: Mailgun (Transactional Email Service)
- Payments: Stripe
- AI search engine: DeeperMind (operated by Ekoal, hosted in France) — AI assistant
- AI model providers: OpenAI (translation, AI assistant) and Anthropic (AI site generator)
We do not sell your personal data. These processors act on our behalf and only process personal data according to our instructions and applicable data protection laws.
7. AI features and the AI assistant
AI features are only used when you trigger them. When you translate content or generate a site with AI, the related content is sent to our AI model providers to produce the result.
When you turn on the AI assistant for a table, the content of the fields you choose is sent to DeeperMind, our AI search engine, and to its AI model provider, only to answer questions about your project — in the Studio, on your websites or through the API. Turning the assistant off for a table removes its content from the index; deleting a project removes all of its content.
Questions asked to the assistant (by your team, by visitors of your websites or through the API) are processed to generate the answer. The conversation context is kept for up to 24 hours; questions may also appear in technical logs kept for security and troubleshooting.
8. Visitors of websites built with Ekit
When you publish a website with Ekit Studio, we process data of its visitors on your behalf, as your processor:
- Audience statistics, measured without cookies.
- Form submissions, stored as entries of your project.
- Questions asked to the site assistant, if you enable it.
You are responsible for informing your visitors, for example in the privacy policy of your website.
9. International transfers
Some providers may process data outside your country. Where required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses).
10. Your rights
Depending on your location, you may have rights to:
- Access your data
- Rectify inaccurate data
- Delete your data
- Restrict or object to processing
- Data portability
- Withdraw consent (where processing is based on consent)
To exercise these rights, contact: contact@ekit.app. We may request proof of identity where appropriate.
11. Security
We implement reasonable technical and organizational measures to protect your data (access controls, encryption in transit, secure storage, monitoring). No system is 100% secure, but we work to protect your information.
12. Children
The Service is not intended for children under 16 years old. We do not knowingly collect personal data from children.
13. Changes to this policy
We may update this Privacy Policy from time to time. The latest version is always available on this page with an updated effective date.
Effective date: October 20, 2026
Language notice
These legal documents are provided in English for convenience. If required, a French version may be provided upon request. In case of discrepancy, the English version shall prevail.