Privacy notice

The data controller is EUTETIC S.R.L., VAT number 03354590600, registered at Via Carlo Alberto Dalla Chiesa 1B, 03023 Ceccano (FR), Italia.

Use [email protected] for support, privacy, security, and data-rights requests.

This notice covers eutetic.com, app.eutetic.com, the Eutetic beta service, and related operational communications. The beta is available to eligible adults in the EEA, United Kingdom, and United States, except where law or a provider restriction prevents access.

Eutetic is for people aged 18 or over. We record your confirmation that you meet that requirement; we do not ask for or store your date of birth.

At signup we collect your first and last name, email address, password, declared country, adult confirmation, and the versions of the Terms and Privacy Notice you accepted. Passwords are handled by Supabase Auth and are not available to Eutetic in readable form.

We also store your profile, organization and Space memberships, role, invitations, entitlement, consent choices, session permits, and security-relevant account events. We process these details to create and secure the account, provide the service, administer organizations, and meet our contractual and legal obligations.

Email verification is required. Free accounts allow one active session; a new login replaces the previous session. A session expires after seven days of inactivity and no later than 30 days after it began.

Cloudflare Turnstile, verified email, network information, and service behaviour are used to prevent automated signup, credential attacks, fraud, and misuse. We do not apply a fixed rule that one IP address may have only one account.

At the application boundary we trust the client IP supplied by Cloudflare. The full address is retained for up to seven days for security investigation; a keyed, pseudonymous correlation value may be retained for up to 90 days. Security audit records are append-only and deliberately exclude prompts, chat text, source contents, passwords, tokens, credentials, and action payloads.

This processing is necessary to provide a secure service and is also based on our legitimate interest in protecting users, infrastructure, and the service from abuse.

The service stores private conversations, messages, run and approval events, attachments, artifacts, message feedback, Spaces, and data-source metadata. Uploaded files and other binary or large objects are stored in a private Cloudflare R2 bucket; transactional records and text up to the service limit are stored in PostgreSQL. Uploaded files are sent directly from your browser to the private bucket and are never processed by the application servers; each file stays quarantined and unusable until automated checks confirm its type.

For a live PostgreSQL source, the connection secret is held in Supabase Vault and the application database stores only its reference. Authorized workers can retrieve it only to test or run the read-only query you requested. Replacing a credential deletes the prior secret after the replacement succeeds.

Agent requests and the minimum content needed to answer them are sent to the configured AI model provider. Do not submit passwords, authentication tokens, special-category data, regulated secrets, or third-party material you are not entitled to process. Organization administrators are responsible for choosing lawful sources and access rights for their organization.

Private chats are visible only to their author. Administrators can manage the organization and its Spaces but cannot read members' private chats. An artifact becomes visible in a Space only when an authorized user explicitly publishes a separate copy.

• Private conversations, messages, run events, and their attachments are removed 14 days after their last activity. An upload that is never completed is removed after 60 minutes.
• Pending action approvals expire with the same 14-day runtime retention window.
• Organization sources and shared artifacts remain until an authorized user removes them or the organization is deleted.
• Contributor candidates remain for no longer than 90 days unless deleted or anonymized sooner.
• Encrypted daily database and Auth backups are retained for seven days. A deletion ledger is reapplied after every restore so deleted records do not return to the live service.
• Operational logs and traces are retained for seven days and use allowlisted, content-free fields.

Self-service account deletion starts an immediate purge of the account's live PostgreSQL, Vault, and R2 data, subject to organization succession rules and the short backup window above. Organization deletion requires support verification by its administrator. Private chats belonging to a removed member are deleted no later than 14 days after removal.

Product analytics is off until you opt in separately. Selected events pass through the Eutetic backend and contain a pseudonymous identifier and allowlisted operational properties, never prompts, chat text, email addresses, query strings, source contents, credentials, or action payloads.

Content-free analytics files may be retained indefinitely. When your account is deleted, the mapping that connects its analytics pseudonym to the account is destroyed. You can change the analytics choice in account settings without affecting service access.

Contributor is separate from the Terms, service access, and analytics. An organization administrator may enable the offer, but every active member chooses independently for that organization. Accept and Decline both allow access, and consent can be withdrawn in settings.

Only assets separately authorized by the appropriate administrator, Space editor, or private-chat author can become candidates. Credentials, secrets, and prohibited sensitive categories are excluded. Withdrawal stops new collection immediately and deletes or anonymizes candidates that can still be linked to you. Derivatives verified as genuinely anonymous may be kept indefinitely because they are no longer personal data.

The programme remains subject to legal review. In particular, Eutetic does not expose a nominative consent list to organization administrators unless that review confirms it would not undermine freely given consent.

The service uses Seeweb for compute hosting, Cloudflare for DNS, proxying, Turnstile and EU-jurisdiction object storage, Supabase for EU-hosted PostgreSQL, Auth and Vault, Resend for transactional email, the configured Regolo model provider for AI inference, and configured Sentry and Better Stack services for content-free error and availability monitoring. The public contact form sends enquiries through Resend to our mailbox.

Primary account and workspace data is configured to remain in the European Union. Network, email, model, support, and monitoring providers may process limited data from other locations under their applicable data-processing and transfer terms. Final provider contracts and transfer safeguards must be validated before public launch.

When you join the waitlist, we collect your name, email address (personal or work), chosen language, and signup date. These details are stored in our backend PostgreSQL database to manage your request for early access and contact you when Eutetic becomes available to you. Joining does not create a platform account or subscribe you to unrelated marketing.

We use these details to respond to your request for access and take steps at your request before providing the service. We retain them while your early-access request is active and remove them when the waitlist is closed or you ask to leave. To request removal or correct your details, contact [email protected].

The public form asks for your name, company, work email, and message so we can answer your enquiry. It does not add you to a marketing list. Resend delivers the message to our mailbox; you may instead write directly to the contact address above.

We keep the resulting correspondence while the enquiry is active and then only as long as reasonably needed for follow-up, legal, or security purposes. Do not include sensitive or unnecessary third-party information.

Eutetic uses AI models to generate analysis, plans, messages, and proposed actions. In Approval mode, each external action requires a person's confirmation. Full Access remains bounded and cannot change PostgreSQL credentials or sources or remove sources. Eutetic is not intended to make solely automated decisions that produce legal or similarly significant effects about a person.

Depending on the law that applies to you, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw a consent without affecting processing that was lawful before withdrawal. Account settings provide personal export, analytics controls, Contributor controls, and self-service account deletion.

Send a rights request to [email protected]. We may need to verify your identity. You may also complain to the supervisory authority where you live or work, including the Italian Garante per la protezione dei dati personali.

We will update this notice before materially changing how personal data is used. Where required, we will present the new version for acceptance or consent rather than treating silence as agreement.