Skip to content

Privacy Policy

Last updated: March 2026

This is a translation. The French text is the only legally binding version of this document. Where this English translation and the French original differ, the French original prevails.

Introduction

TalentAI SAS (hereinafter "TalentAI" or "we"), publisher of the Le Bureau platform, available at lebureau.talentai.fr, is committed to protecting the privacy of its users in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act of 6 January 1978 as amended.

This privacy policy describes the personal data we collect, the purposes for which it is processed, the applicable legal bases, and the rights available to you.

1. Data controller

The controller of personal data is:

  • TalentAI SAS
  • 10 place Gabriel Péri, 92310 Sèvres, France
  • Nanterre Trade and Companies Register 993 661 529
  • Email: contact@talentai.fr
  • Legal representative: Alex Siphaxay, President

2. Personal data collected

We collect the following categories of data:

Identification data

Surname, first name, email address, profile picture (via GitHub/Google OAuth), user identifier.

Connection data

IP address, browser type, operating system, pages visited, date and time of connection.

Usage data

Information relating to the use of virtual machines (creation, start-up, shutdown), to scheduled tasks, to AI agent activity, and to interactions with the dashboard.

Payment data

Payment data (bank card number and the like) is collected and processed exclusively by our payment provider Stripe. TalentAI does not have access to complete banking data.

3. Purposes of processing

Your personal data is processed for the following purposes:

  • Provision of the service - Creation and management of your account, provisioning of virtual machines, execution of tasks.
  • Billing - Management of subscriptions and payments via Stripe.
  • Improvement of the service - Analysis of platform usage via PostHog in order to improve the user experience.
  • Security - Detection and prevention of fraud, abuse and security incidents.
  • Communication - Sending of service-related notifications (alerts, updates, incidents).
  • Legal obligations - Compliance with accounting, tax and legal obligations.

4. Legal bases for processing

  • Performance of the contract (article 6.1.b GDPR) - For the provision of the service and the management of your account.
  • Legitimate interest (article 6.1.f GDPR) - For the improvement of the service and the security of the platform.
  • Consent (article 6.1.a GDPR) - For analytics cookies (PostHog).
  • Legal obligation (article 6.1.c GDPR) - For accounting and tax obligations.

5. Recipients of the data

Your personal data may be disclosed to the following recipients:

  • Stripe - Payment processing.
  • PostHog - Usage analysis (analytics).
  • OAuth providers (GitHub, Google) - Authentication.
  • Competent authorities - Where required by law.

We never sell your personal data to third parties.

6. Data hosting

Personal data and virtual machines are hosted on a dedicated server operated by OVH SAS and located in France:

  • OVH SAS
  • 2 rue Kellermann, 59100 Roubaix, France
  • Website: ovhcloud.com

All data is hosted in France, in compliance with European regulations. No data is transferred outside the European Union for hosting purposes.

7. Retention periods

  • Account data - Retained for the duration of your use of the service, then for 3 years after your last activity.
  • Connection data - Retained for 12 months in accordance with applicable regulations.
  • Billing data - Retained for 10 years in accordance with accounting obligations.
  • Virtual machines - Data stored in the VMs is deleted when the User deletes the virtual machine.

8. Your rights

Under the GDPR, you have the following rights:

  • Right of access - To obtain confirmation that your data is being processed and to receive a copy of it.
  • Right to rectification - To request the correction of inaccurate or incomplete data.
  • Right to erasure - To request the deletion of your data under the conditions provided for by the GDPR.
  • Right to restriction - To request that the processing of your data be restricted.
  • Right to portability - To receive your data in a structured, commonly used and machine-readable format.
  • Right to object - To object to the processing of your data on legitimate grounds.

To exercise your rights, contact us at contact@talentai.fr. We will respond within 30 days.

You also have the right to lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.

9. Cookies

The platform uses cookies. To find out more, see our Cookie Policy.

10. Changes to this policy

We reserve the right to amend this privacy policy at any time. Changes take effect as soon as they are published on the platform. We encourage you to consult this page regularly.

11. Contact

For any question relating to the protection of your personal data:

Terms of UseTerms of SaleCookie PolicyLegal Notice