Privacy policy
Last updated: 4 July 2026
Data controller
The data processed by Aridelle is processed under the responsibility of Eric Mollenthiel, sole trader (entrepreneur individuel), SIREN 795 225 226, 103 avenue Lacassagne, 69003 Lyon, France. For any question about this policy or your data: contact@aridelle.com.
What data is processed
Account data: e-mail address, display name (optional), password (stored only in hashed form, never in plain text), timestamps of creation, address confirmation, acceptance of the terms of use and of consent, two-factor authentication settings if you enable it.
The content of your case files: the facts, notes, conversations with the assistant, labels and attachments (as well as the text extracted from documents and the summaries generated) that you choose to record. By their nature, this content may include sensitive data (health, family life, private life — Art. 9 GDPR), data relating to court decisions (Art. 10 GDPR), information about third parties (for example the other party to a dispute) or minors. You decide what you record: Aridelle collects nothing more than what you place there.
Subscription data: if you take out the paid offer, a customer identifier with our payment provider Stripe and the status of your subscription. Your banking data is entered directly with Stripe and never passes through our servers.
Logs: technical server logs and the service access log (logins, viewing of a case file, downloading of an attachment), kept for security and traceability purposes.
Why, and on what legal basis
Providing the service (keeping your account and your case files, operation of the assistant, sharing that you decide): performance of the contract (Art. 6(1)(b) GDPR). For the sensitive data you choose to record: your explicit consent (Art. 9(2)(a)), obtained via a dedicated checkbox when the account is created and withdrawable at any time by writing to contact@aridelle.com (withdrawal does not affect the lawfulness of prior processing; it entails the deletion of the content concerned or of the account).
The information about third parties that you record is recorded for the establishment, exercise or defence of your legal claims (Art. 9(2)(f) GDPR) — see the "Data concerning third parties" section below.
Securing the service (logs, limiting abuse): legitimate interest (Art. 6(1)(f)). Billing of the subscription: performance of the contract and legal accounting obligations (Art. 6(1)(c)).
Your data is never used for advertising purposes, never resold, and is not used to train artificial-intelligence models.
AI assistant and data recipients
When you use the assistant, the messages of the conversation and the items of the case file that you have made visible to the assistant (each item has a visibility setting: hidden, summary or full) are transmitted to Anthropic, provider of the artificial-intelligence models, under commercial terms including a data-processing agreement compliant with the GDPR: Anthropic does not use this data to train its models. As Anthropic is established in the United States, this transfer is covered by the safeguards provided for in Chapter V of the GDPR (standard contractual clauses).
The other recipients are Stripe (subscription payment) and OVH (hosting of the server in France and routing of our e-mails). No other third party receives your data. If you share a case file with someone, that sharing is your sole decision and the invited persons see the content according to the role you assign to them.
Retention periods
Your case files and your account are kept for as long as your account exists. You can delete an item, an attachment, a conversation or an entire case file at any time from the application, and request the complete deletion of your account by writing to contact@aridelle.com. Address-confirmation links expire within 24 hours and password-reset links within 1 hour. The access log is kept for 12 months. Daily technical backups are kept for 14 days: deleted content disappears permanently from the backups at the end of this period.
Security
Exchanges with the site are encrypted (TLS). Passwords are hashed with a modern algorithm (Argon2id). Attachments are encrypted at rest on the server. Each case file is compartmentalised: only its owner and the persons they have invited have access, and these accesses are logged. You can enable two-factor authentication (2FA) from the "Security" page of your account. The server is hosted in France and is subject to daily backups.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability over your data, as well as the right to withdraw your consent at any time. To exercise them, write to contact@aridelle.com from the address associated with your account; we respond within one month. You may also lodge a complaint with the CNIL (cnil.fr).
Data concerning third parties
A case file often documents a situation involving other people. You record this information under your responsibility, to the extent necessary for the defence of your rights, and you undertake (see the terms of use) not to make disproportionate use of it. If a person considers that data concerning them appears in an Aridelle case file, they may write to contact@aridelle.com: each request is examined on a case-by-case basis, balancing their rights against the protection of the user's case file (including the right to defence in court) — the existence or content of a case file is neither confirmed nor disclosed to a third party outside the cases provided for by law.
Minors
Aridelle is reserved for adults. Information relating to children (for example in a parental-conflict case file) is recorded by the parent as part of the defence of their rights and the interest of the child.
Cookies
Aridelle uses only cookies strictly necessary for the operation of the service: login session, the "stay signed in" option (30 days), trusted device for two-factor authentication (30 days) and form protection (CSRF). No advertising cookie, no third-party audience tracker — which is why no consent banner is necessary.
Changes to this policy
This policy may change with the service. In the event of a substantial change, you will be informed at least 15 days in advance (notification in the application or by e-mail). The version in force is always the one published on this page. See also the legal notice, the terms of use and the terms of sale.