Privacy

Who we are

Chappe is run by Théo Nairi, in France. For any question about your data, write to privacy@chappe.org.

What we keep, and why

Your account: your email address (to send you sign-in codes and short notifications, which you can turn off on your account page), the language of those emails, your name and your handle (so your contacts can see and add you).

Your handoffs: what you send, so the person you chose can open it in their AI. Private sections you leave out are never shared.

Who your contacts are, so that nobody can send you anything you did not accept.

To measure the beta: the time of each handoff you send and whether it went to yourself, to someone else or with an invitation (never what, nor to whom), kept a year or until you delete your account; and whether each contact came from an invitation or a request.

To stop abuse: a keyed fingerprint of your IP address and of your email address when you ask for a code, type one or create an account, the times we sent you a notification (not what it said) and the times you created a handoff, kept one day or until you delete your account. The same fingerprint of the address that writes to our abuse address, so that it gets one acknowledgement a day, is kept one day.

To spot abuse, an hourly check emails Chappe's own abuse address when sign-ups surge, the email budget runs low or an account reaches its daily handoff limit. The alert holds counts and handles, never content or email addresses.

Sign-in codes stop working after 10 minutes and are then erased. Browser sessions last 30 days or until you sign out, and are then erased.

On what basis

We process your data to perform the service you signed up for (your account, your handoffs, your contacts and the notification emails), and, for the security of the service and to prevent abuse (rate limits, alerts, moderation), because we have a legitimate interest in doing so. The light or dark cookie is a preference you set yourself, and the session cookie is needed to keep you signed in: neither needs your consent.

What we never do

We do not sell or share your data, show ads or train AI models on it.

Nobody reads your handoffs except the people you send them to. We do not read them either, except when the law requires it.

We do not use tracking cookies. One cookie keeps you signed in; another remembers light or dark mode, if you pick one.

How long

A handoff is kept until it expires or you revoke it, then erased. A handoff Chappe removes for breaking a rule of the terms keeps only its title, its dates, the rule and whether it followed a report for 30 days, so its sender can see why, then is erased. A suspended account keeps the date, the rule and whether it followed a report until you delete it. When you delete your account, everything is erased at once: your handoffs sent and received, your contacts and your sessions.

Who helps us

Cloudflare hosts Chappe and its database. Brevo sends our emails, which hold only a code or a name, never the content of a handoff.

Transfers outside the EU

Cloudflare, Inc. (United States) hosts Chappe and its database. These transfers rely on the EU-U.S. Data Privacy Framework, in which Cloudflare is certified (https://www.dataprivacyframework.gov/participant/5666), with standard contractual clauses as a fallback. Brevo, which sends our emails, is in France (EU).

Your rights

You can see, correct or erase your data at any time: delete your account from its page, or write to privacy@chappe.org. You can also complain to the CNIL, the French data protection authority.