The privacy policy and the terms of service are updated

The privacy policy is updated, and stays a draft. The page at /legal/privacy has a new version, dated 2026-10-10, in English and French. It keeps its draft banner until legal's final review.

Support access is spelled out. When you ask us for help, or to investigate a security incident, an authorised iAdvize administrator can sign in to the dashboard as your account through our identity provider. Each session is limited to 60 minutes, and our identity provider records it with the administrator who opened it and the reason given.

It covers your site's pages. It explains what we keep about the pages of your site: addresses from a sitemap import, pages you add by hand and pages found from traffic, and, for a page we read, an excerpt of its text, its content organised into sections, product facts and questions and answers, and a limited number of shopper reviews without the reviewers' names. If your site refuses our reader, we ask our search provider to fetch the page instead, sending only its public address. This applies to every site, and that provider's data-processing terms are still being put in place. The assistant uses the page content to answer your shoppers, and a model reads it under zero data retention to write starter questions when you ask for them, or automatically if you turn that on. Page views are counted per page and per day, with no identifier of the shopper attached. Automatic reading is on by default; you can turn it off, and page-view counting too, in your site's automation settings. Page-view counts are kept for 90 days. Playground conversations are also labeled after the fact, for example whether the need was met, and the labels are deleted with the conversation.

Product emails and what leaves the EU. If you subscribe to a product email, we now record whether you open each email and which links you click, to know which emails and topics are read, on the basis of your consent. The section on where your data is now says what each provider outside the European Union holds: our identity provider in the United States holds your sign-in identity, name, picture, language and time zone, sessions and multi-factor settings; our email provider in the United States holds your email contact, your preferences and the service emails we send you with their delivery records; playground messages may be processed by a model provider outside the EU; and a web search query or page address goes to our search provider. Model calls are made through our hosting provider, with its credentials and under its agreement.

The terms of service are updated but still a draft. Their version date is now 2026-10-10. Three points are still open with legal (the data processing agreement, the liability cap and the three-month retrieval period after termination), so the draft banner stays. Your organisation keeps on record the version it accepted: 2026-09-17 if it accepted before this update.

Access without a written agreement is a free test. Where no separate written agreement exists, your access is free of charge, without commitment and without any service level, until a written agreement replaces it. Either party can end it at any time.

Who answers for what. French law applies, disputes go to the courts of Nantes, and the French version prevails. iAdvize answers, as provider under the EU AI Act, for telling shoppers they are talking to an AI, and you must keep that statement in place, including in a page or interface of your own that embeds the assistant or calls it directly. The service is for professional use, and the person who accepts warrants they can bind the company. Nothing limits liability for fraud, wilful misconduct or gross negligence.

What applies to shoppers, and when. You test a version of the assistant before you publish it, but some settings (starter questions, site information, tone of voice and connector tools) reach shoppers as soon as you save them. The assistant can add, change or remove items in a shopper's cart through a connector you enabled, and on a connector you add yourself, every tool its server exposes is on until you switch it off.

Usage and your data. Where a separate written agreement counts conversations, a billable one is a conversation where the shopper sent at least one message. The dashboard's usage meter creates no payment obligation during a free test; it counts your conversations on your public surfaces per calendar month (UTC), and Playground test conversations are not counted. Outputs we make available in the dashboard or the API, such as conversation labels and generated starter questions, are part of your data for as long as they are there. Special categories of personal data, such as health data, need a written agreement first. After the end, you have three months to retrieve your conversations through the REST API (a period still to be confirmed). Confidentiality is spelled out in full, and we never name you as a customer reference without your written consent.