Privacy Policy

Last updated: October 1, 2026. Kapari is operated from the European Union and built to the standard of the EU General Data Protection Regulation (GDPR). We offer GDPR-grade rights to every user, wherever you are.

Who we are

The service is operated by Pierre Barreaud, sole proprietor, 401 rue de Barbotte, 45160 Olivet, France. Contact: contact@kapari.eu. He is the data controller for the processing described here.

What we collect, and why

• Account data: email address and password (stored hashed, never in clear text), to create and authenticate your account.
• Your content: the context and decisions you type, the panels you compose, the simulations you save, to provide the service and let you save and share your work.
• Technical logs: IP address and timestamps, strictly for security, abuse prevention and service operation.
• Access requests: first name, last name, organization, role and email you submit through the access form, to process your request and manage the relationship.
• Email address and trial dates: to warn you before your trial ends, and on the day it ends. This rests on our legitimate interest in telling you about the service you use, and you can object in every such message.

We do not sell your data, and we do not share it for advertising purposes.

AI processing

To generate a simulation, the context and decision you type are sent straight to Mistral AI, whose model runs on infrastructure in the European Union. Since September 18, 2026, that call no longer passes through any US intermediary. To check the meaning of some steps (for instance, keeping only the studies from our base that actually bear on your decision), the decision and its context, the panel's simulated profiles and reactions, sentences of the note to be checked, items taken from a page you have Kapari read by link, and facts drawn from your case file may also be sent, item by item, to TypeSafe AI (United States), whose Jev model answers yes or no, or picks from a list, and writes no text. Its data processing agreement includes the standard contractual clauses; we have not yet obtained TypeSafe's written confirmation that it covers our account, that it keeps these texts no longer than processing requires, and that it does not use them to train its models. Panel voices are synthetic sociological profiles: no real person is interviewed. The facts of your case may name people or organizations, and those names travel with them to the models. Optionally, the public-facts lookup ("actor memory") uses Google's Gemini service (United States) with the decision text only. Your content is never used to train a model, neither ours nor Mistral's; for TypeSafe, that is not yet confirmed in writing.

Processors and hosting

• Hosting: Hostinger International Ltd, VPS located in Paris, France.
• Database: Supabase (account and saved simulations), hosted in Paris (AWS region eu-west-3).
• Model that writes the panel voices: Mistral AI, directly, executed in the European Union. Public-facts lookup: Google Gemini (US).
• Model that checks the meaning of some steps without writing anything (yes or no, a pick from a list): Jev, by TypeSafe AI (US). It receives, item by item, the decision and its context, the panel's simulated profiles and reactions, sentences of the note to be checked, items taken from a page you have Kapari read by link, and facts drawn from your case file; never a whole document. Written confirmation of its contractual safeguards has not yet been obtained.
• Public-facts search on your request ("Search public facts"): Perplexity, via OpenRouter (US). It receives only the search queries you reviewed and confirmed, never your documents.
• Sending the service's emails (credentials, password reset, trial expiry notices): Resend (US). It receives your address and the text of the message, nothing else.

Retention

• Account: kept while active, deleted after three years of inactivity.
• Saved simulations: kept until you delete them or delete your account. Facts extracted from an attached document travel with the saved simulation and disappear with it; the document itself is never transmitted nor kept.
• Folder notes: the analysis (dated facts, who is involved, tensions) you choose to file into a folder is kept until you delete it, note by note or by deleting the folder; deleting the account erases everything. These notes may describe third parties: they remain private, visible, editable and deletable at any time from the app.
• Technical logs: twelve months.
• Access requests: for the duration of the commercial relationship.

The messages we send you

There are two kinds, and you do not have the same say over both.

• Messages that answer something you did: your credentials when the account opens, a password reset, the acknowledgement of your access request, the reply to a message you write us. They are part of the service itself, and you cannot unsubscribe from them: it would cut you off from your own account.
• Messages we decide to send: today, the two notices that warn you your trial is ending, fifteen days before and on the day itself. They rest on our legitimate interest in telling you about the service you use, and each one carries a link to stop receiving them. The refusal takes effect at once, needs no reason, and changes nothing about your account, which stays open with all your simulations.

We send no newsletter and we give your address to no one. If a message of the second kind ever reaches you without an unsubscribe link, write to contact@kapari.eu: that is a defect on our side, not an exception.

Your rights

Wherever you are located, you can access, correct, export or delete your data, and object to or restrict its processing. Account deletion is self-service from your account page and cascades to your saved content. For anything else, write to contact@kapari.eu. If you are in the EU, you may also lodge a complaint with your supervisory authority (in France, the CNIL).

Security

Passwords are hashed, sessions use httpOnly cookies, transport is encrypted (HTTPS), and access to production data is restricted to the operator. No method of transmission is perfectly secure; we describe the chain as it is and fix what we find.

Audience measurement

On the public pages of kapari.eu and fr.kapari.eu, and only there, we measure traffic with Google Analytics: how many people read a page, how they got there, on what kind of device. This measurement runs only after you explicitly accept it. Until you do, no third-party script is loaded and no measurement cookie is stored. IP addresses are truncated before processing. We run no advertising and sell nothing.

The application itself is out of scope. No third-party measurement runs on app.kapari.eu, where you type your real decisions.

You can withdraw your consent at any time, as easily as you gave it: change my audience measurement choice.

Changes

We will post any material change on this page with an updated date. The French version of this policy is available at fr.kapari.eu/confidentialite.html.