Privacy policy

Last updated: June 18, 2026

Panelia applies the principle of privacy by design and complies with the GDPR.

Data controller

Maxence Lassus (sole trader), publisher of Panelia, acts as data controller for account and billing data, and as data processor if a client imports a real audience.

Data collected

By default, no real personal data feeds the personas, which are synthetic. We collect only strictly necessary data: account (e-mail, name), organization, billing.

Legal basis

Performance of the contract (Terms) for the service; consent for marketing communications (double opt-in).

Hosting & residency

Data is hosted in the EU region. Encryption is applied in transit (TLS) and at rest.

Retention period

Data is kept for the duration of the contractual relationship, then archived or deleted in accordance with applicable legal retention periods (notably accounting and tax).

Sub-processors

We rely on sub-processors bound by data processing agreements (DPAs):

Anthropic — response generation (LLM);
Voyage AI — embedding computation (scoring);
Hostinger — hosting;
Stripe — payment processing.

Your rights

Access, rectification, deletion and portability of your data. Deleting your account triggers the purge of associated data, within legal timeframes.

Contact

To exercise your rights: privacy@panelia.io.