Privacy Policy

Data collected

We only collect data necessary for the service to function:

• Email address (account creation and communication)
• Name (experience personalization)
• Anonymized usage statistics (number of protected prompts)
• Payment data processed exclusively by Stripe (we do not store any banking information)

Data usage

Your data is used exclusively for:

• Providing and improving the anonymization service
• Managing your account and subscription
• Contacting you for important service updates

Prompt processing

Our fundamental commitment: your sensitive data is never stored or transmitted to AI models.

• Anonymization happens in real-time — no prompt is kept after processing
• Mappings (tag → real data) are stored temporarily in memory and deleted at the end of the session
• No personally identifiable data is ever sent to third-party AI models

Data sharing

We never sell your personal data. Sharing is strictly limited to the following cases:

• Stripe: payment processing (banking data only, never stored by Obscura)
• Supabase: hosting and authentication (EU servers, encrypted data)
• No personal data is shared with AI providers (OpenAI, Google, Anthropic) — only anonymized prompts are transmitted to them
• No sharing with third parties for advertising or profiling purposes

Hosting and security

We apply the strictest standards for data security:

• Servers hosted in the European Union (France)
• Data encrypted in transit (TLS 1.3) and at rest (AES-256)
• GDPR compliant — no data transfers outside the EU

Your rights

In accordance with GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct your information
• Right to erasure: delete your account and all your data
• Right to portability: export your data in a standard format

Contact us

For any questions regarding the protection of your data or to exercise your rights, contact us at privacy@obscura.ai. We commit to responding within 30 days.