This privacy policy describes how Chilat, the company operating the https://www.edbuild.ai website, collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR).
The data controller is:
Chilat – 943 275 453 RCS Paris
Registered office: 49 rue de Ponthieu, 75008 Paris, France.
No Data Protection Officer (DPO) has been appointed, as the company is not legally required to do so.
On the landing page (https://www.edbuild.ai):
Email address
Browsing data (cookies, IP address, connection data, pages viewed, user behavior)
On the web app (accessible after account creation):
Last name
First name
Email address
Company name
Phone number
Branding elements
Service usage data (logs, features used, frequency of use)
No sensitive data (racial origin, sexual orientation, health, etc.) is collected.
Personal data is collected in order to:
- Handle requests for information and demos (consent – Art. 6.1(a) GDPR)
- Create and manage user accounts (performance of a contract – Art. 6.1(b) GDPR)
- Improve the user experience on the site and the web app (legitimate interest – Art. 6.1(f) GDPR)
- Send communications relating to EdBuild AI’s services (transactional emails: performance of the contract / marketing communications: consent)
- Ensure the security of the site and the web app (legitimate interest – prevention of fraud and unauthorized access)
Data is retained:
- For the period strictly necessary for the purpose of the processing
- For a maximum of 3 years after the last interaction, for prospects
- For 5 years after account closure, for registered users’ contractual data
- Until account deletion, for user account data, then archived if necessary
Certain data may be retained for longer where required by law, in particular for archiving or reporting purposes, or to allow the exercise or defense of legal rights.
Anonymized or aggregated data that no longer allows individuals to be identified may be retained indefinitely.
Restricted-access account. When the free trial period expires without a subscription, or when a subscription is not renewed, the account switches to restricted access. Account data and the content created are retained and remain accessible for viewing by the account holder. No data is deleted as a result of this switch alone. The retention periods set out above continue to apply, with deletion occurring upon closure of the account or upon expiry of the applicable period, whichever occurs first.
Landing page: data hosted by Webflow, on servers located in the United States. These transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission and supplemented by additional technical measures (in particular encryption and access control).
Web app: data hosted by Vercel, also GDPR-compliant with adequate protection measures. Where data is likely to be processed outside the European Union, equivalent safeguards compliant with the GDPR are implemented.
Data is accessible exclusively to:
- Chilat’s authorized internal teams
- Technical service providers acting on our behalf, in particular:
• hosting and infrastructure
• analytics tools
• communication and support tools, strictly within the scope of their assignments.
No personal data is sold to unauthorized third parties.
EdBuild AI uses sub-processors for the performance of the service. In accordance with Articles 13, 14, and 28 of the General Data Protection Regulation, this section lists the sub-processors used by EdBuild AI, the nature of the processing entrusted to them, and their location. This list is kept up to date and forms an integral part of the data processing agreements entered into with our customers. Any addition or replacement of a sub-processor is notified in writing to the customers concerned, with a minimum notice period of 30 days before it takes effect.
| Service Provider | Nature of the Service | Relevant data | Location |
|---|---|---|---|
| Scaleway | Infrastructure for running the generation service, object storage for generated media, backups, image repository, log retention | All Categories | Paris, France |
| Vercel | Web Application Hosting and Storage of Imported Media | Content, Identification, Monitoring | European Union |
| Neon | Database | Login, Tracking, Connection | Frankfurt, Germany |
| Service Provider | Nature of the Service | Relevant data | Location |
|---|---|---|---|
| Mistral AI | Document recognition, language models | Training content | France |
| DeepL | Content translation | Training content | Germany |
| Auphonic | Podcast audio post-processing | Training content (audio) | Austria |
| Anthropic | Language models, including podcast script writing | Training content | Outside the EU |
| OpenAI | Language models | Training content | Outside the EU |
| HeyGen | Avatar video sequence generation | Training content | Outside the EU |
| Fish Audio | Podcast voice synthesis | Training content (scripts) | Outside the EU |
These providers receive training content excluding any learner identification data. None of them use the submitted content to train their models: this is a contractual commitment under the professional-tier offering (Mistral AI, DeepL, Anthropic, OpenAI) or a written exclusion obtained by EdBuild (HeyGen, Fish Audio). At the customer’s request, text content generation can be entrusted exclusively to Mistral AI; the avatar video and podcast features, which rely on providers established outside the European Union, are then disabled unless the customer agrees otherwise in writing.
| Service Provider | Nature of the Service | Relevant data | Location |
|---|---|---|---|
| Microsoft | Email and office software | Business communications | European Union |
| Sentry | Application error monitoring | Technical context, user identifiers | European Union |
| Grafana Labs | Technical operational metrics | No personal data or content | Western Europe |
| Resend | Transactional emails | Name, email address | Ireland |
| Intercom | Support, trainer and administrator accounts only | Identification of trainers and administrators, excluding learners | European Union |
| HubSpot | EdBuild's customer relationship management | Identification of trainers and administrators, excluding learners | European Union |
Transfers to providers established outside the European Union are limited to the categories set out above, and are governed by the safeguards provided for in Chapter V of the General Data Protection Regulation, in accordance with the commitments made by each provider.
| Transfer | Relevant data | Mitigation measure |
|---|---|---|
| AI processing of content | Training content, without identification data | At the customer's request, text generation entrusted exclusively to Mistral AI; avatar video and podcast disabled unless agreed in writing |
| Support for trainers and administrators | Identification of trainer and administrator accounts, excluding learners | Migration to the provider's European region planned |
| Source code hosting | No customer data | Not applicable |
Under the GDPR, you have the following eight rights over your data:
- Right to information
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
- Right not to be subject to automated decision-making
To exercise your rights: rgpd@edbuild.ai
You also have the right to lodge a complaint with the competent supervisory authority: the French Data Protection Authority (CNIL) – www.cnil.fr
EdBuild AI implements all appropriate technical and organizational measures to ensure the security and confidentiality of your personal data.
While EdBuild AI is responsible for protecting the personal data it processes, in accordance with the GDPR, we cannot guarantee absolute security given the inherent risks involved.
The site uses cookies to:
- Ensure the site works properly (strictly necessary cookies)
- Measure audience and improve performance (statistics cookies)
- Facilitate your browsing
Cookies are only placed after your consent has been collected, where such consent is required.
Cookies are retained for no more than 13 months.
How we share your information: We will not transfer your personal information to third parties without your consent, except in the limited cases described below:
We require these third parties to use the personal information we transfer to them only for the purposes for which it was transferred, and not to retain it longer than necessary to achieve those purposes. We may also disclose your personal information in the following cases:
(1) to comply with the law, regulations, a court order, or any other legal process;
(2) to enforce your agreements with us, including this Privacy Policy;
or (3) to respond to claims that your use of the Service violates the rights of a third party.
If the Service or our company is merged with or acquired by another company, your information will be part of the assets transferred to the new owner. Advertising service / Analytics.
This cookie policy explains what cookies are and how we use them, the types of cookies we use, i.e. the information we collect using cookies and how that information is used, as well as how to manage your cookie settings. Cookies are small text files used to store small amounts of information. They are stored on your device when the website is loaded in your browser. These cookies help us make the website work properly, make it more secure, provide a better user experience, understand how the website performs, and analyze what works and what needs improvement.
How do we use cookies?
Like most online services, our website uses first-party and third-party cookies for several purposes. First-party cookies are mainly necessary for the website to function properly and do not collect any personally identifiable data. Third-party cookies used on our website mainly serve to understand website performance, how you interact with our website, to keep our services secure, to offer you relevant advertising, and overall to provide you with an improved user experience and speed up your future interactions with our website.
EdBuild AI keeps a timestamped record of user consent via the CookieYes platform, in accordance with GDPR requirements.
Managing cookie preferences
You can change your cookie preferences at any time by clicking the button in the bottom-left corner.
This will bring you back to the cookie consent banner, where you can change your preferences or withdraw your consent immediately.
In addition, different browsers offer different methods for blocking and deleting cookies used by websites. You can change your browser settings to block/delete cookies.
Below are links to help documents on managing and deleting cookies in the main web browsers.
Chrome: https://support.google.com/accounts/answer/32050
Safari: https://support.apple.com/en-in/guide/safari/sfri11471/mac
Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox?redirectslug=delete-cookies-remove-info-websites-stored&redirectlocale=en-US
Internet Explorer: https://support.microsoft.com/en-us/topic/how-to-delete-cookie-files-in-internet-explorer-bca9446f-d873-78de-77ba-d42645fa52fc
If you use a different browser, please consult your browser’s official support documentation.
This policy may be updated from time to time. In the event of a material change, users will be informed by an appropriate means (notice on the site or by email). The updated version takes effect as soon as it is published.
Last updated: September 14, 2026.
