HazeltBack

Privacy Policy

Last updated: June 2026

This is a courtesy translation. In case of any discrepancy, the French version shall prevail.

1. Data Controller

The data controller is HAZELT, a SASU (single-shareholder simplified joint-stock company) with a share capital of €1,000, registered with the Lyon Trade and Companies Register under number 101 801 314, with its registered office at 12 rue de la Part-Dieu, 69003 Lyon, France.

Data protection contact: contact@hazelt.app

2. Data Collected

In connection with the use of Hazelt, we collect the following data:

Identification Data

Last name, first name, email address, profile picture (provided via Google or Microsoft upon registration).

Usage Data

Reports created (title, description, photos, categories), uploaded documents, comments, and actions performed.

Technical Data

IP address, browser type, language preference, login timestamps.

Billing Data

Payments are processed by Stripe. Hazelt does not store any credit card data. Only billing information (plan, dates, amounts) is retained.

3. Purposes of Processing

  • Provision and operation of the Hazelt service
  • Authentication and user account management
  • AI-powered report analysis and recommendations
  • Billing and subscription management
  • Service improvement and bug fixes
  • Service-related communications (account notifications)

4. Legal Basis

  • Performance of a contract: provision of the service, account management, and billing
  • Legitimate interest: service improvement, security
  • Legal obligation: retention of billing records

5. Sub-processors and Transfers

Your data is processed by the following sub-processors:

  • Microsoft Azure (EU) — website, application, and data hosting, file storage, and AI services
  • Stripe (United States) — payment processing
  • Google / Microsoft — OAuth authentication

Application data is hosted in the European Union (Microsoft Azure). Transfers to the United States (Stripe, authentication) are governed by the European Commission's standard contractual clauses and/or the EU-US Data Privacy Framework.

6. Artificial Intelligence and Data Processing

Hazelt integrates artificial intelligence features (report analysis, chat assistant) powered by Microsoft's Azure OpenAI services.

Data transmitted

Report title, description, and photos; content of documents uploaded to the knowledge base; messages sent to the chat assistant.

Hosting and processing

Data is processed through Azure OpenAI in Microsoft data centers located in the European Union.

No use for training

Your data is not used by Hazelt, Microsoft, or any third party to train, improve, or develop AI models. Prompts and responses may be temporarily retained by Microsoft for abuse monitoring purposes. For more details, see the official Microsoft documentation.

7. Data Retention

  • Account data: retained for the duration of the use of the service, then deleted within 30 days of termination
  • Billing data: retained for 10 years in accordance with accounting obligations
  • Technical logs: retained for a maximum of 12 months

8. Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Access: obtain a copy of your personal data
  • Rectification: correct inaccurate data
  • Erasure: request the deletion of your data
  • Portability: receive your data in a structured format
  • Objection: object to the processing of your data
  • Restriction: request the restriction of processing

To exercise these rights, please contact us at contact@hazelt.app. We will respond within 30 days.

You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), the French data protection authority: www.cnil.fr

9. Security

Hazelt implements appropriate technical and organizational measures to protect your data: encryption in transit (HTTPS/TLS), secure authentication via OAuth 2.0, restricted access to production data, and regular backups.

10. Cookies

Hazelt only uses cookies that are strictly necessary for the operation of the service:

  • Authentication session — maintains your logged-in state
  • Language preference — remembers your language choice
  • Theme preference — remembers your light/dark mode choice

No advertising, analytics, or tracking cookies are used.

11. Amendments

This policy may be updated from time to time. In the event of a material change, users will be notified through the service. The date of the last update is indicated at the top of this page.