Privacy Policy

Updated on January 15, 2025

The Website https://bluegpt.app (hereinafter the "Website") and its underlying software and source code are the intellectual property of InspireLabs, a French SAS, société par actions simplifiée, with a share capital of 100 euros, registered with the Toulouse R.C.S, under number 948 309 059, headquartered in: InspireLabs - 5 chemin de Gramont - 31200 TOULOUSE (hereinafter referred to as "BlueGPT "). While the platform infrastructure and software are owned by InspireLabs, all user-generated content remains the exclusive property of respective users. BlueGPT, in its capacity as the data processor, attaches great importance to the protection and respect of privacy.

The purpose of this privacy policy is to inform any person using the Website and its services (hereinafter the "Users"; or "User") of BlueGPT practices regarding the conditions of collection, use and sharing of information that Users are required to provide as well as their rights.

The Website complies with French and European legal standards regarding the protection of privacy and personal data as of the date hereof, and in particular with the French law n°78-17 of January 6, 1978, named "Loi informatique et Libertés", and the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR"), regarding the protection of individuals with regard to the processing of personal data and the free circulation of such data. BlueGPT is committed to maintaining this compliance and adapting its practices in accordance with regulatory developments, subject to reasonable timeframes necessary for implementing such adaptations. BlueGPT disclaims all liability for any temporary non-compliance resulting from regulatory changes pending implementation.

IMPORTANT: NOTE TO USERS

ANY NAVIGATION ON THE WEBSITE AFTER THE PUBLICATION OF THIS PRIVACY

POLICY CONSTITUTES ACCEPTANCE OF THIS POLICY WITHOUT RESERVE.

If the User wishes to withdraw their consent to the processing of their data, they simply need to request it directly by email at the following address: [email protected]

Furthermore, where required by law and/or in certain circumstances, the User’s consent may be collected, or a possibility of refusal may be provided before any data is transmitted, subject to legal, technical, or operational constraints.

Person responsible for processing the personal data collected

The person responsible for processing personal data is BlueGPT.

Nature of the data collected

The data collected on the Website in the context of the use of the services are those enabling BlueGPT to identify Users directly or indirectly and to provide the services.

This may include the following categories of data concerning Users:

data of civil status, identity, identification such as name and e-mail address;
economic and financial data such as payment data;
security data such as passwords;
connection data such as IP address and navigation data such as cookies; and
AI-generated content data such as conversation prompts, AI-generated text, images, and videos.

The compulsory or optional nature of the personal data collected and the possible consequences of a failure to reply are generally indicated at the time of their collection on the associated forms, where technically feasible.

Users who communicate the personal data of a third party should confirm that they have the consent of this third party for the use of the personal data of the latter by the Website. BlueGPT is not responsible for verifying such third-party consents and disclaims all liability for any unauthorized use of third-party data by Users.

Accuracy and Truthfulness of User Data: Users represent and warrant that all personal data and information they provide to BlueGPT is accurate, complete, current, and truthful. Users are solely responsible for the accuracy and integrity of the data they submit. BlueGPT shall not be held liable for any consequences, damages, losses, or claims arising from or related to Users providing false, inaccurate, incomplete, or misleading information, including but not limited to issues with account access, service delivery, billing, communications, or legal compliance. Users agree to promptly update their personal data to maintain its accuracy and completeness.

Purpose and legal basis of processing activities

a. Purpose of processing activities

The personal data collected on the Website are used only for and during the execution of services for the following purposes:

management of the commercial relationship;
processing and management of the User's subscriptions;
management and tracking of credit consumption and usage;
billing based on subscription and credit usage;
communication with the User;
customer testimonies;
commercial prospecting on all the offers of BlueGPT;
sending newsletters on services and new features (Users are automatically subscribed upon account creation and may unsubscribe at any time via the links provided in the emails);
good functioning and continuous improvement of the Site and its functionalities;
general administration of the Site;
general management of the security of the Site;
collection of information by means of cookies and other tracers;
commercial evaluation of the services of BlueGPT;
data analysis;
identification of usage trends;
determining the effectiveness of promotional campaigns;
monitoring performance of the Site; and
evaluating services, marketing and customer experience.

In addition, BlueGPT may use and/or keep the data to meet, where appropriate, its legal and/or regulatory obligations.

b. Legal basis of processing activities

The processing activities and the personal data collection are authorized based on the following legal bases:

The execution of contractual obligations, for the management of the commercial relationship;
The consent of the User, for:
- commercial prospecting;
- sending of newsletters;
- commercial evaluation of services; and
- deposit of cookies and other tracers.
The legitimate interest to guarantee the best level of operation and quality of the Site for the proper functioning and continuous improvement of the Site.

c. Aggregation with non-personal data

BlueGPT reserves the right to publish, disclose and use aggregated information (information about Users or specific groups or categories of Users combined so that an individual User can no longer be identified or mentioned) and non-personal information for industry and market analysis, demographic profiling, promotional and advertising purposes, and other commercial purposes.

d. Timing of data collection

The data collected by BlueGPT is generally communicated by the Users during the registration procedure on the Site, during the subscription procedure or during the use of the services on the Site.

Data, such as connection data, can also be collected automatically while using the Website; in particular when the User:

browses the pages of the Website;
registers on the Site;
subscribes to AI services;
and/or uses the AI services (credit consumption tracking).

These automatically collected data concern only the use of the services and exclude the identity of the User. This collection is used to support the maintenance and operation of BlueGPT's services and for its internal analysis and reporting.

This information includes:

information about how the services are used (frequency, traffic data, how the User reached the Site);
information about the device used to access the services (device name, country, location, IP address, browser and device characteristics, operating system, language preferences, referring URL).

In any case, BlueGPT will use commercially reasonable efforts to ensure that the personal data collected:

is obtained and processed fairly and lawfully;
is recorded for determined and legitimate purposes;
is used in accordance with these purposes;
is adequate, relevant, and not excessive in relation to these purposes; and
is treated with caution to ensure its security and confidentiality in order to prevent it from being damaged, modified, destroyed, or communicated to unauthorized third parties, subject to technical and operational limitations.

BlueGPT's liability for any failure to fully meet these objectives shall be limited to the maximum extent permitted by applicable law.

e. AI-Generated Content and Third-Party AI Providers

BlueGPT provides access to artificial intelligence services, including conversational AI, image generation, and video generation. When Users interact with these AI services, the following data may be collected and processed:

conversation prompts and text inputs submitted to AI conversational agents;
text, images, and videos generated by the AI services in response to User prompts; and
usage data related to AI service consumption (e.g., credit usage, generation frequency).

Processing by Third-Party AI Model Providers: BlueGPT utilizes third-party artificial intelligence model providers (such as OpenAI, Anthropic, and other AI service providers) to deliver the AI services. User prompts and content may be transmitted to these third-party providers for processing and content generation. These third-party providers process data in accordance with their own privacy policies and terms of service, which are independent of BlueGPT.

BlueGPT does not control and cannot be held responsible for the data processing practices, security measures, data breaches, data retention policies, or any other actions or omissions of these third-party AI model providers. BlueGPT disclaims all liability for any loss, damage, unauthorized access, disclosure, or misuse of User data by these third-party providers. Users acknowledge and expressly accept that their prompts and generated content may be subject to the privacy policies, terms of service, and data practices of these third-party providers, over which BlueGPT has no control or responsibility whatsoever.

Retention of AI-Generated Content: AI-generated content (conversations, images, videos) is stored on BlueGPT's servers for the duration of the User's active subscription and for a period of up to three (3) years following account closure, in accordance with section h.2 of this privacy policy. Users may request deletion of their AI-generated content by contacting BlueGPT at [email protected]. BlueGPT will use commercially reasonable efforts to process deletion requests within a reasonable timeframe, subject to technical limitations, legal obligations, backup retention policies, and operational requirements. Complete and permanent deletion from all systems, including backups and archives, may not be immediately feasible or technically possible. BlueGPT disclaims all liability for any delays or technical inability to fully delete User content.

User Ownership: Users retain ownership of the content they generate using the AI services, subject to the terms and conditions of the underlying third-party AI model providers, as specified in the General Terms and Conditions of Sale and Use.

Credit Tracking and Usage Data: BlueGPT collects and processes data related to User credit consumption and usage of the AI services. While BlueGPT implements commercially reasonable systems to accurately track and record credit usage, BlueGPT does not guarantee the absolute accuracy of such tracking systems. Technical errors, system malfunctions, network issues, or third-party service disruptions may occasionally result in discrepancies in credit tracking, consumption records, or billing calculations. BlueGPT's liability for any errors, inaccuracies, or discrepancies in credit tracking or usage data shall be limited to the correction of such errors or, at BlueGPT's sole discretion, the issuance of credit adjustments. Users acknowledge and accept that BlueGPT shall not be held liable for any indirect, incidental, or consequential damages arising from credit tracking errors or billing discrepancies.

f. Recipients of personal data

The recipient of personal data collected on the Website is first and foremost BlueGPT.

The personal data are not communicated to third parties with the exception of the partners of BlueGPT whose communication of personal data is necessary within the framework of the realization of the services proposed by BlueGPT (execution, management and payment of the subscriptions, credit tracking and billing), with the analysis and the follow-up of the data.

Important Disclaimer: The partners and third-party service providers are independent entities operating under their own legal and regulatory obligations. BlueGPT does not control, supervise, or assume any responsibility for the data processing practices, security measures, compliance with applicable laws (including the "Loi Informatique et Libertés" and the GDPR), or any actions or omissions of these partners and third-party providers. BlueGPT disclaims all liability for any loss, damage, data breach, unauthorized access, disclosure, misuse, or non-compliance with applicable regulations by these partners or third-party service providers. Users acknowledge and accept that BlueGPT shall not be held responsible for any consequences arising from the acts or omissions of its partners or third-party service providers.

In addition, other recipients may have access to personal data. These are, where appropriate, the service providers in charge of the Website of BlueGPT (administration, sales, marketing, legal etc.) and its external service providers (technical service providers, access providers, communication agencies, etc.). BlueGPT makes no representations or warranties regarding the data protection practices of these recipients and disclaims all liability for their actions or omissions.

In the event of a change of control of BlueGPT or a merger, an acquisition, a collective procedure or any other form of transfer of assets, the data collected by BlueGPT may be transferred to third parties. BlueGPT will use commercially reasonable efforts to ensure the confidentiality of the personal data collected and, where legally permitted and technically feasible, inform the Users before such data is transferred or subjected to new confidentiality rules. BlueGPT disclaims all liability for the data protection practices of any acquiring or successor entity.

Where legally required and technically feasible, User's consent may be obtained, or a possibility of refusal may be arranged before any data is transferred, except where such consent is not required by applicable law, not technically feasible, or would conflict with legal, regulatory, or law enforcement obligations.

Data collected may also be transferred if vital interests are at stake and BlueGPT believes it is necessary to investigate, prevent or take action to prevent potential violations of its policies and more broadly in situations involving suspected fraud, potential security threats and illegal activities or may be used as evidence in litigation involving BlueGPT.

g. Rights of Users

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 known as the "GDPR" relating to the protection of individuals with regard to the processing of personal data and to the free circulation of such data and with Law no.78-17 known as the "Informatique et Libertés" law of 6 January 1978, amended by Law 2004-801 of 6 August 2004 relating to information technology, files and liberties, the User has the right to access, modify, correct and delete any personal data:

the right of access to their personal data;
the right to modify their personal data;
the right to rectify their personal data;
the right to delete and erase their personal data;
the right to object to the use of their personal data;
the right to limit the processing of their personal data; and
the right of portability of their personal data, when the data is subject to automated processing based on consent or contract;
the right to withdraw consent at any time; and
the right to determine what happens to their data after their death.

Limitation of Liability for GDPR Rights: While BlueGPT will use commercially reasonable efforts to facilitate the exercise of the above rights, BlueGPT's ability to fulfill certain requests may be subject to technical limitations, legal restrictions, third-party data processing dependencies, or conflicting legal obligations. BlueGPT disclaims all liability for any delays, partial fulfillment, or inability to fully satisfy User requests due to such limitations or restrictions. Users acknowledge that the exercise of certain rights may not be technically feasible in all circumstances and that BlueGPT's liability for any failure to process such requests shall be limited to the maximum extent permitted by applicable law.

Users wishing to exercise their rights may send their request via the form for exercising their rights, by e-mail or by post to the following addresses:

Postal mail: InspireLabs - 5 chemin de Gramont - 31200 TOULOUSE
Electronic mail: [email protected]

In the event of exercising one of these rights, the Users must send BlueGPT the elements necessary for their identification: name and email address.

Moreover, in accordance with applicable regulations, User’s request should be signed, accompanied by a photocopy of an identity document bearing their signature, be clear and specify in detail the right they wish to implement and the address in which they wish to receive the reply in the event of implementation of one of the rights listed above. BlueGPT reserves the right to process requests that do not fully comply with these requirements at its sole discretion.

BlueGPT will use commercially reasonable efforts to reply within a maximum period of one (1) month following receipt of the User’s complete and valid request, subject to the complexity of the request, the volume of requests received, technical limitations, and applicable legal requirements. BlueGPT's liability for any delay or failure to respond shall be limited to the maximum extent permitted by applicable law.

Due to the complexity of the request and/or the number of requests, this deadline may be extended to two (2) months or more if technically or legally necessary, on condition that BlueGPT uses reasonable efforts to inform the User within one (1) month of receipt of the request of the reasons for the postponement, where feasible.

BlueGPT informs Users of their right to lodge a complaint with the National Commission for Information Technology and Civil Liberties (hereafter the "CNIL") in one of the ways indicated below:

By phone: +33 1 53 73 22 22
By fax: +33 1 53 73 22 00
Via the CNIL website : www.cnil.fr/fr/plaintes ou www.cnil.fr
By postal mail:

Commission Nationale de l'Informatique et des Libertés - CNIL

3 Place de Fontenoy

TSA 80715 - 75334 PARIS CEDEX 07.

h. Data retention period

h.1 Retention of data for the duration of the contractual relationship

BlueGPT will use commercially reasonable efforts to ensure that the personal data of Users is not kept beyond the time necessary for the execution of its obligations, except for data that BlueGPT needs to keep as evidence, for legal or administrative needs, or in accordance with applicable legislation. BlueGPT's liability for any inadvertent retention beyond these periods shall be limited to the maximum extent permitted by applicable law.

Personal data whose collection is not necessary for the performance of the services of BlueGPT may be deleted and, if necessary, anonymized or stored in a secure manner preventing any further processing pending their deletion, subject to technical and operational limitations.

h.2 Retention of anonymized data after deletion of the User's account

BlueGPT will use commercially reasonable efforts to retain the personal data of Users only for the duration strictly necessary to achieve the purposes described in this privacy policy, subject to technical and operational limitations.

In case of termination of the contract or closure of the User's account, BlueGPT will use commercially reasonable efforts to retain for up to three (3) years from the date of the commercial relationship the information provided by the User, namely:

the name or company name; and
e-mail addresses.

The navigation data may be retained for up to a maximum of six (6) months in accordance with the recommendations of the CNIL, subject to technical and operational requirements.

Beyond this period, BlueGPT will use commercially reasonable efforts to anonymize such data, which may then be kept exclusively for statistical purposes and will not be used for any other purpose.

i. Transfer of personal data abroad

Important Notice: BlueGPT utilizes third-party artificial intelligence service providers, including but not limited to OpenAI (United States) and Anthropic (United States), to deliver the AI services. User prompts and AI-generated content are necessarily transferred to these providers located outside the European Union, primarily in the United States, for processing and content generation.

By using the AI services, Users explicitly acknowledge and accept that their data will be transferred to and processed by these third-party providers in accordance with their respective privacy policies and data protection practices. BlueGPT cannot be held responsible for the data processing practices or data breaches occurring at these third-party AI service providers.

In case of international transfer of the Users' data outside the European Union, it is necessary to distinguish:

countries that have been granted an adequacy decision by the European Commission: in this case, the data is transferred to a country that provides a level of protection deemed sufficient and adequate to the provisions of the European data protection regulations; and
countries whose level of data protection has not been recognized as adequate: in this case, in order to facilitate a transfer in conformity with the European regulation, and in particular to support the security of the data, BlueGPT will seek to base its transfer on protection mechanisms adapted to each service provider and subcontractor, such as the conclusion of standard contractual clauses approved by the European Commission, the application of binding company rules or under an approved certification mechanism, where feasible and appropriate.

Important Disclaimer: While BlueGPT may enter into standard contractual clauses or other data transfer mechanisms with third-party service providers, BlueGPT does not control, monitor, or guarantee the actual compliance of these third parties with such agreements or mechanisms. BlueGPT disclaims all liability for any violations, breaches, or non-compliance by third-party service providers with standard contractual clauses, data protection laws, or any other contractual or regulatory obligations.

j. Security

BlueGPT will use commercially reasonable efforts to implement appropriate technical and organizational measures regarding the regulations applicable to the protection of personal data, including protection against unauthorized or illicit processing and against accidental loss, destruction, or damage. BlueGPT does not guarantee absolute security and disclaims all liability to the maximum extent permitted by applicable law for any security incidents despite such efforts.

When personal data is transferred to third parties for processing, BlueGPT selects third-party processors based on their stated commitment to implement appropriate technical and organizational measures for data protection. However, BlueGPT does not control, supervise, or guarantee the actual security practices, compliance, or data protection measures of these third parties. BlueGPT disclaims all liability for any failures, breaches, or non-compliance by third-party processors.

These measures are defined considering the state of knowledge, the costs of implementation and the nature, scope, context, and purposes of the processing as well as the identified risks.

Depending on the needs, risks, costs and purpose of processing, these measures may include pseudonymization and encryption of data.

This protection can be ensured by the mention of "https" in the URL of the browser as well as by the representation of a closed padlock at the bottom of the screen.

Finally, in the event of a violation of the rights concerning personal data that may create a high risk for the rights and freedoms of the User, BlueGPT undertakes to use commercially reasonable efforts to inform the User of this violation within a maximum period of seventy-two (72) hours following BlueGPT's discovery of such violation, subject to any legal, regulatory, or law enforcement requirements that may delay or prevent such notification.

BlueGPT's liability for any data breach, security incident, or unauthorized access to User data shall be limited to the maximum extent permitted by applicable law. BlueGPT shall not be held liable for any indirect, incidental, consequential, special, or punitive damages arising from or related to any data breach, including but not limited to loss of profits, loss of data, business interruption, or reputational harm. Users acknowledge that no system is completely secure and that BlueGPT cannot guarantee absolute security of User data despite implementing industry-standard security measures.

Force Majeure: BlueGPT shall not be held liable for any failure or delay in performing its data protection obligations, including but not limited to security measures, data breach notifications, or processing of User requests, where such failure or delay is caused by events beyond BlueGPT's reasonable control, including but not limited to: acts of God, natural disasters, war, terrorism, civil unrest, labor disputes, epidemics or pandemics, government actions or regulations, internet or telecommunications failures, cyberattacks, denial-of-service attacks, power outages, or failures of third-party service providers. During any force majeure event, BlueGPT's obligations shall be suspended to the extent affected by such event, and BlueGPT shall not be liable for any damages, losses, or consequences arising from such suspension.

k. Links

On the Website, Users may have access to various links directing them to third-party sites.

BlueGPT will not be responsible for the information that is sent to these third parties or collected by them.

This privacy policy does not govern third party sites or third-party content accessed by the User.

BlueGPT has no control over hypertext links and/or other promotional formats.

Consequently, BlueGPT gives no guarantee concerning the personal data protection practices of the indexed websites and cannot be held liable in the event of a dispute arising between a website indexed on the Website and one of the Users, in particular due to losses or damage suffered, the operators of the indexed websites being solely responsible for their personal data protection practices.

l. Tracers

A tracer is a text file that may be stored in a dedicated space on the hard disk of the User's computer when they consult an online service through their browser.

In practice, tracers are small text files that are placed on the User's computer by the Websites the User visits. They are used to make the Websites work and improve the usability of the Websites.

The tracer is transmitted by a website's server to the User's browser. Each tracer is assigned an anonymous identifier. A tracer cannot ordinarily be traced back to a physical person under normal circumstances.

When consulting the Website, Users are informed that tracers or other means of recording navigation data are used by the Website or by third parties, service providers for the Website and deposited on the User's terminal (computer, mobile or tablet).

BlueGPT or its partners may install, subject to the acceptance of the User, various tracers and in particular:

session tracers, which disappear as soon as the User leaves the Website;
persistent tracers, which remain on the User's terminal until the end of their lifetime or until the User deletes them; and
statistical tracers (allowing to measure the audience of the Site).

Only the sender of a tracer can read or modify the information contained therein.

In accordance with the recommendations of the CNIL, when connecting to the Site for the first time, the User may be asked to expressly accept the Site's tracers, subject to technical limitations.

l.1 Purpose of tracers

The tracers used by BlueGPT or its partners make it possible to identify the Users, to recognize the User's browser when they connect to the Website, to record their access frequencies (traffic measurement) and their display preferences, to adapt and/or personalize the presentation of the Site to improve the User experience and to optimize the Website with the sole aim of providing the services requested by the User.

In addition, the tracers used on the Site are based on the International Chamber of Commerce guide by categories:

strictly necessary tracers;
performance tracers;
functionality tracers;
advertising targeting tracers.

Strictly necessary tracers

Strictly necessary tracers allow the User to browse the Website.

These tracers do not collect any information about the User that could be used for marketing purposes.

BlueGPT uses these tracers to:

ensure the functioning of the Website;
secure the forms and protect them from malicious scripts.

BlueGPT does not use these cookies to:

collect information that could be used to promote services to the User; or
remember the User's preferences or name after the visit.

Performance tracers

These tracers are used to improve the performance of the Website, such as error handling, tracking response rates or improving the design of the Website.

Functionality tracers

These tracers are used to provide services or to keep track of the User's settings in order to improve their visit to the Website.

Targeting or advertising tracers

These tracers are used to promote services for the User on other sites. They may also be used to limit the number of times the User sees a particular advertisement on the Website and to measure the effectiveness of a particular campaign.

Tracers retention period

In accordance with the recommendations of the CNIL, the maximum retention period for tracers is thirteen (13) months after they are first deposited in the User's terminal, as is the duration of the validity of the User's consent to the use of these tracers. The life of the tracers is not extended with each visit. The User's consent must therefore be renewed at the end of this period.

User's right to refuse tracers

During the User’s first time browsing the Website, a banner explaining the use of tracers appears. It allows the User to activate or deactivate certain tracers. It will only disappear once the User has accepted the use of tracers to continue browsing.

The registration of a tracer remains subject to the will of the Users. In accordance with legal and regulatory provisions, BlueGPT seeks to obtain prior consent to the use of tracers, where technically feasible and legally required.

Users also have the possibility of configuring their browsing software so as to oppose, totally or partially (in particular depending on the issuer), the recording of tracers. The configuration also offers the possibility of accepting or refusing tracers on a one-off basis, before they are recorded in the User’s terminal.

Therefore, Users who wish to prevent the recording of cookies can follow the procedure specific to each browser and described in the browser's help menu.

Chrome
Internet Explorer
Edge
Safari
Firefox
Opera

However, in case of opposition to the registration of tracers or the uninstallation of a tracer, Users acknowledge and accept that certain services may no longer function correctly or may not function at all. BlueGPT disclaims all liability for any malfunction, service interruption, data loss, or inability to access services resulting from User's refusal or blocking of tracers.

m. Privacy Policy Modification

BlueGPT reserves the right to modify and update, at any time, the present privacy policy, in order to take into account any legal and/or jurisprudential evolution and to meet the requirements of the regulation applicable to the protection of personal data.

The version that prevails is the one that is accessible online on the day of the consultation of the Website.

Any consultation of the Website after publication of the modified confidentiality policy implies unreserved acceptance of the new confidentiality policy by the User.

n. Contacts

For any request for information or to find out more about the processing of their personal data, including the exercise of their rights indicated above, the User may contact BlueGPT from their account by email or post at the following address:

Postal mail: InspireLabs - 5 chemin de Gramont - 31200 TOULOUSE
Electronic mail : [email protected]

For any complaint or dissatisfaction in connection with the use of their personal data by BlueGPT, the User may contact BlueGPT by email or post at the following address:

Postal mail: InspireLabs - 5 chemin de Gramont - 31200 TOULOUSE
Electronic mail : [email protected]

When the User contacts BlueGPT, they may be asked to identify themselves for verification purposes.

Version updated on 15.01.2025