Privacy Policy
Version of 3 October 2026
This policy describes what data the Manuce service collects, why, how long it retains it and what your rights are. It applies to the website, the customer area and the business area. It is written to be read: if anything remains unclear, write to us.
1. Data Controller
Rocket IA (trading name AI ROCKET), registered with the Registre national des entreprises under SIREN number 851 274 183 (SIRET 851 274 183 00025), APE code 6201Z, whose registered office is located at 1 rue du Seigneur Foulque, 60240 Parnes, France, contact@rocket-ia.fr. Rocket IA has not appointed a data protection officer; requests are handled by the Publisher directly at the above address.
2. Your documents
The documents you upload are the heart of the service and its most sensitive data. Here is precisely what happens to them.
- Transmission : encrypted (TLS) between your browser and our servers.
- Analysis : the file is read by our servers to count words, detect language and domain, and extract the text. This step involves no third parties, apart from sending the first three thousand characters to the linguistic engine for domain detection.
- Translation : the text is transmitted in segments, encrypted, to the provider of our linguistic engine, Anthropic, under the terms of its professional services contract: the data is not used for model training and is only retained by them for the time necessary for processing, within the limit of their retention policy (thirty days maximum for abuse detection). No other third party accesses the content.
- Human reading : none, neither at Rocket IA nor at its provider, unless you expressly ask us to examine a document as part of a complaint.
- Retention : on servers located in France (OVHcloud), in your account, for as long as it exists. You can delete a document, or your entire account, at any time; deletion takes effect within thirty days, including backups. Documents uploaded without an order or account are deleted after thirty days.
- Business area : each user only accesses their own documents. Administrators see volumes (words, languages, amounts), with file names visible only to their author.
3. The personal data we collect
| Data | Purpose | Legal basis | Duration |
|---|---|---|---|
| Email address, login credentials (hashed), session token | Open and secure your account, notify you of delivery | Performance of contract | Account lifetime; codes 15 minutes; sessions 90 days |
| First name, surname, company, interface language | Personalise the account and emails | Performance of contract | Account activity |
| Company tax identity (business name, address, SIRET, VAT), logo | Invoicing, branding of PDFs | Performance of contract, legal obligation | Account lifetime; invoices 10 years |
| Order history, quotes, invoices | Perform and prove the service, accounting | Contract, legal obligation | 10 years (accounting records) |
| IP address, timestamp of free trials | Limit abuse of free trial, security | Legitimate interest | 30 days |
| Technical server logs | Security, diagnostics | Legitimate interest | 12 months |
Payment is processed by Stripe Payments Europe Ltd; we neither receive nor store your card details. Stripe acts as data controller for the data necessary for payment, in accordance with its own privacy policy.
4. What we do not do
- We do not sell or rent any data.
- We do not place any advertising cookie without your consent. If you accept it in the consent banner, Google Ads places a cookie used solely to measure the effectiveness of our ads; if you decline, no third-party tracker is loaded. Neither Meta nor any other ad network is present on the site. Your browser's local storage keeps your language, your session, your consent choice and our own audience measurement (see below).
- We do not send marketing emails without your consent. The only automated emails are login codes, order confirmation, delivery notice, company account invitations and invoices.
- We do not use your documents to improve our specialists, nor for any content statistics.
5. Audience measurement
To understand which pages are useful and where our visitors come from, we count visits ourselves. A random identifier is created in your browser on first visit and stored for thirteen months. It is only used to link your visits together on this site alone : it is not transmitted to anyone, does not allow you to be identified and does not follow you to any other site.
We record the page viewed, the stage reached in the order process, the language, the device type and, where applicable, the advertising campaign or site that brought you here. Your IP address is not stored : only a truncated hash, renewed daily, allows us to distinguish between two visitors without being able to trace anyone.
This measurement is strictly limited to our own use, without cross-referencing or transmission: as such, it falls under the consent exemption provided by the CNIL for audience measurement. You can stop it at any time by clearing the site's local storage from your browser.
Advertising measurement, only with your consent. When you accept advertising cookies in the banner, the Google Ads tag is loaded: it lets Google tell us that an order followed a click on one of our ads. Without your consent, it is not loaded at all. Your choice is kept for six months, then asked again; you can change it at any time through the “Manage cookies” link at the bottom of every page. Declining changes nothing in how you can use the site.
6. Recipients and transfers
Subprocessors: OVHcloud (hosting, France), Anthropic (language engine, processing in the United States under the European Commission's standard contractual clauses and its adherence to the EU–US Data Privacy Framework), Stripe (payment, Ireland), Brevo (email delivery, France), and Google Ireland Limited (advertising measurement, only if you have accepted it). Each accesses only the data necessary for its task and is bound by a subprocessing agreement compliant with Article 28 of the RGPD. We may be required to disclose data to authorities when required by law.
7. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to withdraw your consent when it is the basis of processing and to define instructions regarding the fate of your data after your death. To exercise them: contact@rocket-ia.fr, from your account address or with proof of identity. We respond within one month. You may contact the CNIL (www.cnil.fr) if you believe your rights are not being respected.
8. Security
Encryption in transit, servers in France with restricted access, single-use login codes hashed in database, revocable sessions, isolation of documents by user, encrypted backups, access logging. In the event of a data breach likely to result in a risk to your rights, we will inform you and the CNIL within the statutory time limits.
9. Minors
The service is intended for professionals and adults. We do not knowingly collect data from minors under fifteen years of age.
10. Changes
This policy may change as the service evolves. The version date appears at the top; any substantial changes will be flagged in your account or by email.