Alega Logo

Privacy Policy

This privacy policy describes how Alega collects, uses and protects your personal data in accordance with the General Data Protection Regulation (GDPR).

Last updated: January 2026

1. Data Controller

The data controller for personal data is Sofiane SOSTER, publisher of the Alega service.

For any questions regarding your personal data, you can contact us at: contact@alega.ai

2. Data Collected

We collect the following categories of data:

Identification and account data

  • Your email address to identify you and allow you to log in
  • Information related to your subscription (chosen plan, commitment dates)

Billing data

  • Information necessary for managing your payments and subscriptions

Usage data

  • Usage data to improve our services

Documents and content

The documents you upload are processed solely to provide you with the requested service.

They are stored in your personal space, are never used for other purposes and remain under your exclusive control.

You can delete them at any time.

3. Purpose of Processing

Your personal data is collected and processed for the following purposes:

  • Manage your account and subscriptions
  • Ensure continuity of conversations with the AI assistant
  • Comply with our legal and regulatory obligations

4. Subcontractors

We use technical service providers for:

  • Auth0 (authentication) - Authentication and access management. Auth0 is SOC 2 Type II certified. Authentication data is hosted in the European Union (EU-2 region).
  • Stripe (payments) - Secure processing of payments and subscriptions (contractual guarantees GDPR compliant).
  • Artificial intelligence services provider - Processing of your documents and generation of responses via cloud services located in the European Union. Data is processed exclusively to provide the service and is not used for model training purposes, in accordance with the provider's contractual commitments. The provider is subject to contractually guaranteed compliance with the GDPR and implements internationally recognised security standards (ISO 27001, SOC 2 or equivalent depending on the infrastructure used).
  • Microsoft SharePoint (hosting and storage) - Storage of your documents and data. Microsoft SharePoint is ISO 27001 and SOC 2 certified. Data is hosted in France, within the European Union.
  • Database (PostgreSQL) - Hosting of account and usage data. Hosted in the European Union, GDPR compliant.

5. Retention Period

Your data is retained for the duration necessary for the purposes for which it was collected:

You may delete all your data at any time (see section 6 – Right to erasure).

Your documents and folders are automatically deleted after 180 days (6 months) of inactivity. This content follows the same retention period as your documents.

6. Your Rights

In accordance with the GDPR, you have the following rights:

  • Right of access - You can access your personal data at any time through your account
  • Right to rectification - You can correct your personal data through your account or by contacting us
  • Right to erasure - You can delete all your data and folders via the "Delete my files and data" button in your account page. This action is permanent and irreversible.
  • Right to data portability - You can download your documents and export your summaries at any time
  • Right to object - You can object to the processing of your personal data in certain cases

To exercise these rights, contact us at: contact@alega.ai

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration or destruction.

Alega implements appropriate security measures in line with the state of the art, including encryption mechanisms for communications and hosted data. Communications between your browser and our servers are protected by standard security protocols (HTTPS/TLS).

Your data is isolated per user: each account has a strictly separate space (folders, databases). No cross-access is possible between different users' data.

The data you provide as input (documents, content) and the results produced as output are subject to appropriate security measures. They are neither reused for other purposes nor used to train artificial intelligence models.

8. Ownership of content and use of data

The documents and content you upload to the platform remain your exclusive property. They are not reused, shared, or used to train artificial intelligence models without your explicit consent. Use by AI is strictly limited to on-demand processing for the provision of the service.

9. Contact

For any questions regarding this privacy policy or to exercise your rights, you can contact us:

Email: contact@alega.ai