Privacy Policy
1. Data Controller
The data controller is:
- Kodixar
- Email: contact@kodixar.fr
- Data protection contact: contact@kodixar.fr
2. Data Collected
a) Contact form
When you use the contact form, we collect:
- Name
- Company (optional)
- Service of interest
- Message
This data is transmitted via a secure API to a private Discord webhook for processing. It is not stored in a database.
b) Chat assistant
When you use the chat assistant, the following data is processed:
- localStorage: Your messages are stored locally in your browser (localStorage). They are not sent to our servers except when sending a message.
- Session ID: An anonymous session ID is generated and stored in your browser to maintain conversation context.
- IP address: Your IP address is used for rate limiting via Redis (abuse protection) with automatic expiration after 60 seconds.
- Contact data: If you provide contact information through the chatbot (name, email, phone), it may be saved to an address book (CardDAV) for client relationship management.
- Email: Confirmation emails may be sent via SMTP when you book a meeting.
3. Legal Basis for Processing
- Contact form: Legitimate interest (responding to your contact request) — Article 6(1)(f) GDPR.
- Chatbot: Consent (you initiate the conversation) — Article 6(1)(a) GDPR.
4. Data Recipients
Your personal data may be shared with the following third-party services as part of the site operation:
- Discord — Contact form messages are forwarded via a private Discord webhook for notification. Discord Inc. is based in the US and operates under EU Standard Contractual Clauses.
- OpenAI / OpenRouter — Chatbot messages are processed by an AI model (GPT-4o-mini) via OpenRouter to generate responses. Messages are sent in real-time and not retained by the provider beyond request processing.
- n8n (self-hosted) — Chatbot orchestration is handled via n8n, self-hosted on our own servers. Data remains under our control.
- SOGo (CardDAV/CalDAV) — Contact information and appointments are stored on our self-hosted SOGo server.
No data is sold or shared with third parties for marketing or advertising purposes.
5. Data Retention
- localStorage: Chatbot messages remain in your browser until you manually clear them or clear site data.
- Chat session memory (Redis): Conversation memory is stored in Redis with automatic expiration after 24 hours.
- Contacts (CardDAV): Contact information is retained for the duration of the business relationship and deleted upon request.
6. Your Rights (GDPR Art. 15-21)
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate data
- Right to erasure: request deletion of your data
- Right to portability: receive your data in a structured format
- Right to object: object to the processing of your data
To exercise these rights, contact us at: contact@kodixar.fr
You may also file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr
We commit to responding to any request regarding your rights within 30 days of receipt.
7. Data Breach Notification
In the event of a personal data breach likely to result in a risk to your rights and freedoms, we commit to:
- Notify the CNIL within 72 hours of becoming aware of the breach (Art. 33 GDPR).
- Inform you without undue delay if the breach is likely to result in a high risk to your rights (Art. 34 GDPR).
8. Cookies and Local Storage
This website does not use tracking cookies or third-party cookies. The following data is stored in your browser via localStorage:
- chat-session-id: Anonymous session ID for the chatbot
- chat-messages: Local history of your messages
- chat-sound-enabled: Sound preference for notifications
- theme: Theme preference (light/dark)
You can delete this data at any time via your browser settings or the chat history clear button.
9. Changes
This privacy policy may be updated. The date of last modification will be indicated below.
Last updated: January 2026