Personal data

Privacy policy

Last revised: August 30, 2026. This policy describes how **GAMATHEL** processes the personal data of mirok.ai users and visitors, in accordance with the General Data Protection Regulation (GDPR).

1.Data controller

The data controller for personal data is GAMATHEL, a French SAS with share capital of €500, Paris Trade and Companies Register 940 515 877, registered office at 60 rue François 1er, 75008 Paris. For any question about your data, you can contact us at [email protected].

2.Data collected

We collect the following categories of data:

  • Account data: name, email address, password (stored irreversibly/hashed);
  • Billing data: billing address, VAT number where applicable; card and bank details (IBAN) are collected and processed directly by Stripe and never pass through our servers;
  • Service usage data: analyzed websites, generated and approved content, conversation history with the marketing agent, agent settings;
  • Technical data: IP address, connection logs, cookies strictly necessary for the Service to function (session, language preference) and an affiliate-program attribution cookie (retained for 60 days).

3.Purposes and legal bases

Your data is processed for: performance of the contract between us (providing the Service, billing); GAMATHEL's legitimate interest (security, fraud and abuse prevention, Service improvement); compliance with legal obligations (accounting, tax obligations); and, where applicable, your consent (for example for optional marketing communications).

4.Recipients and processors

Your data may be shared with the following processors, strictly to the extent necessary for the purposes described above:

  • Stripe (payments and affiliate payouts);
  • Resend (transactional emails and notifications);
  • OVH (data hosting);
  • DeepSeek and/or OpenAI (AI content generation);
  • Higgsfield (image generation, Scale plan);
  • Google (authentication via Google, if you choose this sign-in method).

5.Transfers outside the European Union

Some of the processors mentioned above (in particular AI model providers) may process data outside the European Union, including in the United States or China. These transfers are governed, as applicable, by the European Commission's standard contractual clauses or an equivalent mechanism ensuring an adequate level of protection.

6.Retention period

Account and usage data are retained for the duration of Service use, then archived or deleted within a reasonable period after account closure, subject to retention periods required by law (in particular accounting and tax obligations, generally 10 years for invoicing documents).

7.Security

GAMATHEL implements reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration, including password encryption and the use of certified providers for hosting and payment.

8.Your rights

Under the GDPR, you have the following rights over your personal data: access, rectification, erasure, restriction of processing, portability, objection, and withdrawal of consent at any time where processing depends on it.

You can exercise these rights by writing to [email protected]. You also have the right to lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), the competent supervisory authority in France.

9.Cookies

The Site uses cookies strictly necessary for its operation (login session, language and theme preference) as well as an affiliate-program attribution cookie, retained for 60 days. These cookies do not require prior consent under applicable regulations, as they are essential to the Service's operation or rely on the legitimate interest of tracking affiliate attribution.

10.Changes to this policy

This policy may be updated to reflect changes to the Service or to applicable regulations. The last revision date appears at the top of this document.

11.Contact

For any question about your personal data: [email protected].