Privacy Policy
Last updated: 16 June 2026.
Principle: 100% in-browser anonymisation
Priversi detects and masks personal data locally, in your browser. The text or document you anonymise is never sent to our servers to be analysed. Only the anonymised version (tokens) may leave your device, when you choose to send it to an AI.
Data controller
The data controller is Denis Jannot, sole trader, reachable at contact@priversi.com.
Data processed
If you create an account, we process: your email address (sign-in); your conversations, stored end-to-end encrypted (zero-knowledge) — the server keeps only encrypted data it cannot read; technical data (IP address, logs) for security and proper operation.
Without an account, the application runs entirely locally: no data is sent to the server.
End-to-end encryption (zero-knowledge)
The encryption key for your conversations is derived from your passphrase (Argon2id) and never leaves your browser. The publisher technically cannot access the content of your conversations. Losing your passphrase and recovery code results in permanent loss of access to the encrypted data.
Purposes and legal basis
Your data is used to provide the service, manage your account and send sign-in emails (one-time code). Processing is based on the performance of the contract (providing the service) and legitimate interest (security, fraud prevention).
Retention period
Account data: kept for the duration of your registration, then deleted within a reasonable time after the account is closed. Encrypted conversations: kept until you delete them or close your account.
Sub-processors
To operate the service we rely on: OVHcloud (hosting of the site and database — server located in France); Google (sign-in via Google account, if you use it); Resend (sending one-time sign-in emails).
Hosting and transfers outside the EU
The site and database are hosted in France by OVHcloud. Account data and encrypted conversations remain stored on French territory.
Some sub-processors for ancillary services are located outside the European Union; the associated transfers are governed by Standard Contractual Clauses (SCC): Google (USA) and Resend (USA).
Your rights
In accordance with the GDPR, you have the rights of access, rectification, erasure (right to be forgotten), portability, objection and restriction of processing.
To exercise these rights, contact us at contact@priversi.com; we will respond within 30 days. You may also lodge a complaint with the CNIL (www.cnil.fr).
Cookies
The site uses only cookies strictly necessary for the operation of the service (authentication, session management, language preference). No analytics or advertising cookies are used; these functional cookies do not require consent under CNIL guidelines.