Your data, our terms and how we use AI

How EmployIA handles your information, who we share it with, what you control, and the terms that apply to the service. Last updated: October 12, 2026.

Legal notice

Publisher: Mohammed Bouyahyaoui, sole proprietorship (entreprise individuelle, EI) registered in France, SIREN 521 550 400, 48A rue Kahl am Main, 38090 Villefontaine, France. French VAT not applicable (art. 293 B of the French Tax Code).
Publication director: Mohammed Bouyahyaoui.
Contact: contact@employia.fr · +33 7 58 17 81 71.
Hosting provider: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States (cloudflare.com).

Data controller

The publisher above is the controller for account, sign-in and billing data. For the documents and text you give your AI employees, EmployIA processes them on your behalf.

What we store

Account: your email address and, if you turn it on, two-factor authentication (encrypted secret).
Sign-in: a strictly necessary session cookie (__Host-employia_session, 30 days maximum, 14 days without activity), the date of last activity and the browser type of each signed-in device. Sign-in links are stored only as a hash and expire after 15 minutes.
Security: temporary attempt counters, based on a hash of the network address and email, to block abuse.
Workspace: AI employee settings, knowledge, uploaded files, requests, replies, approvals and the activity log.
Billing: Stripe customer and subscription IDs, plan, status, and proof of your consent at the time of purchase (accepted text and version, date). EmployIA never receives or stores card details.

When you make an AI request

The AI provider (currently OpenAI) receives the employee’s instructions, your request, a limited conversation history, excerpts from the authorized documents it consults and the text of the web pages it reads. If the employee searches the web, the search keywords are sent to the search engine (Brave Search). Uploaded PDFs are transcribed once by the AI provider. Drafted emails are only sent after your approval. Share only the information needed and avoid secrets, passwords and sensitive data. Every result is a proposal to check before you use it.

Sending from your Gmail or Outlook account

If you connect your Gmail (Google) or Outlook (Microsoft) account in Applications, EmployIA asks only for permission to send emails on your behalf (Gmail: gmail.send; Microsoft: Mail.Send) and to know the address of the connected mailbox. EmployIA does not read, list or delete your emails, contacts or calendar.

What is sent: only the emails your AI employees drafted and that you approved one by one, to the recipient shown when you approved them.
What is stored: the mailbox address, the provider, the connection status, the date of the last email sent and an encrypted refresh token (AES-GCM) in our database hosted in Europe. The token is never displayed, exported or sent to an AI provider.
What we don’t do: no data received from Google or Microsoft is used to train an AI model or for advertising, sold, or shared with third parties; no human looks at it except with your explicit consent, for security, or to comply with the law.
Revoking access: the “Disconnect” button in Applications deletes the token immediately. You can also remove access from your Google account (myaccount.google.com/permissions) or your Microsoft account.

EmployIA’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Claude and ChatGPT connectors (MCP)

If you connect EmployIA to Claude (Anthropic) or ChatGPT (OpenAI), you authorize it, through an OAuth connection you can revoke at any time in Applications, to view and manage your workspace on your behalf: employees, documents, created files, scheduled tasks, pending emails and activity. The information EmployIA returns to the assistant is processed by Anthropic or OpenAI under their own terms and privacy policy. EmployIA stores only a hash of the connection tokens, the app name, the authorization and last-used dates, and records the actions taken in your workspace’s activity log. EmployIA does not collect your conversations with these assistants.

Service providers

Cloudflare (hosting): database in Western Europe, files stored within the European Union jurisdiction.
OpenAI (generating replies and transcribing PDFs), Brave Search (employees’ web searches), Resend (sending sign-in emails, task results and approved emails when no mailbox is connected), Google and Microsoft (sending from your mailbox, if you connect it), Stripe (payments and subscriptions).

These providers are based in the United States; transfers rely on their contractual commitments (Standard Contractual Clauses or the Data Privacy Framework).

Legal bases and retention

Performance of the contract for the account, the workspace and the service; legal obligation for billing records (10 years); legitimate interest for security. Workspace data is kept as long as the account exists; sessions expire automatically; Claude and ChatGPT connector connections expire after 90 days without use or as soon as they are revoked; a mailbox connection is kept until you disconnect it or delete your account.

Your rights (GDPR)

You can export your data from Settings, delete a knowledge document, sign out your devices, and request access to, correction of or deletion of your account by writing to contact@employia.fr. You may also object to or restrict certain processing. If you disagree with how we handle your request, you can file a complaint with the French data protection authority, the CNIL (cnil.fr), or with the authority in your own country.

US residents (including California)

We do not sell your personal information and do not share it for cross-context behavioral advertising. We use it only to provide the service, as described on this page. Wherever you live, including under the California Consumer Privacy Act (CCPA), you can ask to know what personal information we hold about you, get a copy of it, and have it corrected or deleted by writing to contact@employia.fr. We will not treat you differently for exercising these rights.

Cookies and analytics

EmployIA uses only the session cookie required to sign in. No advertising tools or third-party analytics trackers. Your browser keeps an in-progress AI request locally so it can resume after a connection drop.

Terms of Service

These terms apply to your use of EmployIA, published by Mohammed Bouyahyaoui, sole proprietorship (entreprise individuelle, EI) registered in France (“we”). By creating an account or subscribing, you accept them.

The service: EmployIA lets you configure AI employees that work with your documents and connected apps. Features are labeled “Available”, “Beta” or “Coming soon”; beta features may change or be interrupted. We work to keep the service available but do not guarantee uninterrupted operation.
Your account: you must provide a valid email address and keep your sign-in links and codes confidential. You are responsible for activity in your workspace.
Free trial and billing: your first subscription starts with a 7-day free trial (50 tasks). Your card is saved by Stripe and nothing is charged during the trial. If you don’t cancel before the trial ends, your subscription renews automatically each month or year at the price of the plan you chose. Each plan includes a monthly number of tasks; there are no overage charges, and tasks are declined once the limit is reached until the next renewal.
Cancellation: you can cancel anytime from Billing, in one click. Cancellation takes effect at the end of the current billing period, and you keep access until then. Except where the law requires otherwise (including the right of withdrawal for consumers described at checkout), periods already started are not refunded.
AI output must be reviewed: AI can make mistakes. Every result (email, document, analysis, quote) is a proposal you must review before using or sending it. EmployIA does not provide legal, tax, financial or medical advice. You remain responsible for your decisions and for anything sent or published after your approval.
Acceptable use: you agree not to use EmployIA to break the law, send spam or unsolicited bulk messages, infringe the rights of others, process data you are not allowed to process, attempt to bypass limits, approvals or security measures, or harm the service or other users. We may suspend an account that violates these rules.
Your content: you keep all rights to the documents and content you upload and to the files created for you. You grant us only the rights needed to provide the service. You can export or delete your data at any time.
Liability: to the extent permitted by law, we are not liable for indirect damages (such as lost profits, revenue or data), and our total liability is limited to the amounts you paid for the service during the 12 months before the event giving rise to the claim. Nothing in these terms limits liability that cannot be limited by law or your mandatory rights as a consumer.
Changes: we may update these terms. We will notify you of material changes by email or in the app before they take effect; if you disagree, you can cancel your subscription.
Governing law: these terms are governed by French law. Disputes fall under the jurisdiction of the competent French courts, without prejudice to any mandatory consumer protection rules of your country of residence. Before going to court, please contact us at contact@employia.fr so we can try to resolve the issue together.