Legal
Privacy policy
Privacy policy for Frontière AI (FLEECE AI SASU): what we collect and why, who processes it, how long we keep it and your GDPR rights. No prompt is stored.
Read in Français
Last updated: October 2026
Introduction
This privacy policy explains how Frontière AI (operated by FLEECE AI SASU) collects, uses, and protects your personal data when you use our services. We are committed to transparency, data minimisation, and full compliance with the EU General Data Protection Regulation (GDPR). Our policy is built around one principle: we collect only what we need to operate, we retain only as long as necessary, and we never use your data beyond the purposes described here.
Data controller
FLEECE AI SASU is the data controller for all personal data processed through Frontière AI's services. FLEECE AI is a French simplified joint-stock company with a single shareholder (SASU), registered with the Clermont-Ferrand trade and companies register under number 932 329 188, with its registered office at 10 rue Pierre Poisson, 63400 Chamalières, France. You may contact us about your data at contact@fleeceai.agency.
Company registration, publication director and hosting providers: legal notice
Data we collect and why
Zero prompt retention
We do not store your prompts or responses. When you make an API call, your input is processed and the result is returned to you — Frontière AI keeps neither once the response is sent. We do not log your prompts, we do not archive your conversations, and we do not keep them for debugging, monitoring, or any other purpose. This applies to every model, sovereign and fast access, and to the MCP server. The web console follows the same rule: your conversations are kept in your browser only. What a model provider keeps is covered in the next section.
Agent mode, in the web console, follows the same rule. An agent turn runs in our application itself: your message, the files of the conversation that your browser sends with it, and the files the agent produces exist only in the memory of the function that runs the turn, and are gone when it ends. The conversation and its files are kept only in your browser. No code is ever run. What the model provider receives is covered in Third-party data sharing.
Training on your data
Frontière AI never uses your prompts, responses or any other data sent through the service to train, fine-tune or improve a model, and never sells or passes them on for that purpose. A model provider receives your request only to run it. For the models labeled EU sovereign, OVHcloud states zero data retention (billing data only) and Scaleway states prompts are not stored, except requests that cause errors or abuse, which it keeps up to two weeks. For fast-access models, what Modal or OpenRouter may keep, and whether it may be used for training, follows their own policies — and behind OpenRouter, the policies of its upstream providers vary. We make no promise on their behalf: if that matters for your data, choose a model labeled EU sovereign.
Provider-by-provider evidence: how we determine sovereignty
Data retention
We keep data only as long as we need it. Account data — your email and name, your API keys (as a hash), your usage events, your agent turn records and your top-up history — is kept while your account is open. Newsletter addresses are kept until you unsubscribe; unsubscribing deletes yours. There is no self-service account deletion and no automatic purge yet: to close your account or have your data deleted, write to contact@fleeceai.agency. We then delete your account data and the matching PostHog profile, except the billing records French accounting law requires us to keep, and confirm it by email within 30 days. Withdrawal requests sent through the online form are kept as legal evidence of their date of receipt, even after your account is deleted, for the limitation period applicable to consumer disputes. One nuance from the terms of service: if you close an account that still holds credit and do not ask for deletion, we keep the balance on record for 12 months so we can reopen the account if you ask; after that it is deleted.
Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict processing, and port your personal data. You also have the right to object to processing based on legitimate interest. To exercise any of these rights, contact us at contact@fleeceai.agency. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority — in France, the CNIL (cnil.fr).
To exercise your rights, contact us at contact@fleeceai.agency
Third-party data sharing
We do not sell, rent, or trade your personal data. We share it only with the providers that run the service, each for its own role.
Models. Models labeled “EU sovereign” are run by OVHcloud and Scaleway (French companies, data centers in France), by Mistral AI (a French company, on its EU region), by AKI.IO (a German company in Berlin, which states it runs these models on GPUs operated by AIME GmbH in German data centers; AKI.IO confirmed in writing on 13 October 2026 that every model it serves today, ours included, runs at its “Trust Level 5”: hosted by AKI.IO in Germany, with zero retention and no training; the Alibaba Cloud (Singapore) entry on its sub-processor list concerns marketplace models that are not launched yet, which we will not use), or by Infomaniak (a Swiss company, in its own data centers in Switzerland — outside the EU, under an EU adequacy decision); each model's page names its provider. Image generation — through the API (POST /v1/images) or with the Images switch of the web console — is served by Infomaniak; in the console, a photo you attach for a portrait is sent to it too, and the generated image is kept only in your browser. A request to one of those models stays with them, fallback included, unless you explicitly allow every provider (per request with the X-Data-Sensitivity: insensitive header, or for an API key). Models labeled “Fast access (US)” are run by US companies (Modal, OpenRouter): your requests reach them only if you choose one of those models or allow every provider, and we never call them sovereign. OpenRouter passes each request to one of its upstream providers, whose policies vary.
Hosting. The application itself runs on Vercel, in its Paris region: requests, prompts included, pass through it in transit; prompts and responses are never stored there. Like any host, Vercel keeps short-lived request logs (such as path, status code, time and user agent — never the request body) for the retention period of our Vercel plan. Our database (Neon, part of Databricks, Frankfurt region) holds account, billing, newsletter and withdrawal-request data only — never prompts.
Other services. Sign-in emails, top-up confirmations, withdrawal acknowledgements and the optional newsletter go through Resend, and payments through Stripe (card data never reaches our servers); Google is involved only if you sign in with Google. Our servers send pseudonymous product events to PostHog (EU cloud, data stored in Germany) — see Cookies and analytics. Optional features add a provider: web search, in the web console and in the MCP server's web_search and web_fetch tools, sends the query or URL to Linkup (Paris), under its own retention policy; voice dictation in the console goes to Mistral AI (Paris — the recorded clip is not kept by Frontière).
Agent mode. The model you choose for an agent turn is called through our gateway under the rule of the web console: a model labeled “EU sovereign” is only run by its EU providers, fallback included, and a “Fast access (US)” model is run by a US company — the label tells you who receives what the agent sends. Whichever it is, that provider sees everything the agent sends it: your messages, the content of the files the agent reads, and the results of its tools. The turn itself runs in our application on Vercel (a US company, Paris region): your messages and files pass through it for the length of the turn and are not stored there, and like any host Vercel keeps request logs, as described under Hosting. The agent's web searches and page reads, when it makes them, go to Linkup, as described under Other services. When the agent generates an image, its description goes to Infomaniak, a Swiss company, in its own data centers in Switzerland (outside the EU, under an EU adequacy decision), which states that it neither stores nor logs these requests.
Vercel, Neon (part of Databricks), Resend, Stripe, Google, PostHog, X, Modal and OpenRouter are US companies: US law, including the CLOUD Act, applies to them even when they process data in the EU. That is why we label jurisdiction model by model, and why only European providers run the models we call sovereign.
Legal basis for processing
We process personal data on the following legal bases: contractual necessity (your account and sign-in, the API service, billing); consent (the optional newsletter, and analytics and marketing cookies — withdrawable at any time); legitimate interest (service operation, security and abuse prevention, and measuring product activation through the pseudonymous server-side events described above); legal obligation (keeping billing records as accounting law requires; recording and acknowledging withdrawal requests, French Consumer Code art. L221-21). Our legitimate interests do not override your fundamental rights and freedoms, and you can object to processing based on them. We document all processing activities in our Record of Processing Activities as required by Article 30 of the GDPR.