Privacy Policy
Last updated: October 8, 2026. Data controller: Inellis SAS.
This English version is a translation provided for convenience. If it differs from the French version, the French version prevails.
1. Data controller
Articast is published by Inellis, an SAS registered under SIRET number 942 042 870 00017, with its registered office at 40 Rue des Blancs-Manteaux, 75004 Paris. The data controller is Inellis, represented by its President, Julien Defaut. For any question about your personal data, you can write to us at contact@inellis.com.
2. Data we collect
We collect the following data:
- Account data: email address, hashed password (bcrypt), account creation and update dates, email verification status.
- Session data: session token, IP address, expiration date.
- Submitted content: URLs and article text provided to generate podcasts. This content is processed ephemerally; only the extracted title is stored in our database with the resulting podcast.
- Usage data: podcasts produced (title, length, date, cost in credits), credit usage history.
- Contact data: messages sent through the contact form (subject, content, sender's email).
No payment data is collected: Articast does not offer online payment at this time. Credit top-ups are handled manually on request.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Providing the service (account, generation, audio) | Performance of the contract |
| Email verification at sign-up | Performance of the contract |
| Credit management | Performance of the contract / Legal obligation |
| Responding to contact requests | Legitimate interest |
| Improving the service (technical logs) | Legitimate interest |
| Compliance with legal obligations (accounting) | Legal obligation |
4. Processors and transfers
We use the following processors to operate the service. Each processes your data under the terms of its own privacy policy.
- Transactional email provider (verification, notifications). Some data may be transferred outside the European Union, under the European Commission's Standard Contractual Clauses.
- Third-party AI providers (script generation and speech synthesis): the text of submitted articles and the scripts produced are sent to third-party artificial intelligence services to produce the audio. This processing is governed by each provider's contractual commitments; some data may be transferred outside the European Union, covered by the European Commission's Standard Contractual Clauses.
Account data and the audio files produced are stored on servers located in the European Union.
5. Retention periods
- Account data: for the life of the account, then deleted within 30 days.
- Sessions: expire automatically (after 14 days of inactivity).
- Podcasts and audio files: kept as long as the account is active; deleted with the account.
- Billing data (credit top-ups): 10 years (legal accounting obligation).
- Technical logs: rolling 90 days.
6. Your rights (GDPR)
In accordance with Regulation (EU) 2016/679 and the French Data Protection Act (loi Informatique et Libertés), you have the following rights over your personal data:
- Access: obtain a copy of your data.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request the deletion of your account and your data.
- Objection: object to processing based on legitimate interest.
- Restriction: request that processing be suspended while you contest it.
- Portability: receive your data in a structured, machine-readable format.
To exercise these rights, contact us at contact@inellis.com. We will respond within 30 days. You may also file a complaint with the CNIL, the French data protection authority.
7. Cookies and trackers
The service uses only cookies that are strictly necessary for it to work: an authenticated session token (HttpOnly, Secure, SameSite=Lax). No third-party advertising or analytics cookies are set at this time.
8. Security
Passwords are hashed with bcrypt before storage. Communications between your browser and our servers are encrypted with HTTPS/TLS. Access to the database is restricted to the application server alone.
9. Changes
If this policy changes substantially, users will be notified by email at least 15 days before the changes take effect. The current version is always available at articast.pro/en/privacy.