The short version: we do not sell, rent or trade personal information. The website collects what you type into its forms so we can answer you, stores technical logs for security, and measures visits with analytics only after you accept, never before. Every processor we use is listed below, and you can exercise your GDPR rights through the contact page.
- Who is responsible for your data
- What we process, why, and on which legal basis
- What the products send (nothing, by default)
- Who receives your data
- International transfers
- How long we keep it
- Your rights
- Cookies and analytics consent
- Changes to this notice
1. Who is responsible for your data
The controller is LM-KIT SAS, a French company registered with the RCS of Toulouse under number 932 314 792, with its registered office in Muret (31600), France. Full company identification is on the legal notice page. For any privacy request, use the contact page and mention "privacy" in your message.
2. What we process, why, and on which legal basis
Each processing activity on this website, stated separately:
- Contact, pricing and support requests. Name, work email, company, country, message, and any attachment you choose to send. Purpose: answering your request and following up on it. Legal basis: steps taken at your request prior to a contract (Article 6(1)(b) GDPR), and our legitimate interest in responding to professional enquiries.
- Newsletter. Your email address, used only to send the newsletter you subscribed to. Legal basis: consent (Article 6(1)(a)), withdrawable at any time through the unsubscribe link in every email.
- Audience measurement. Pages visited and technical browser data, through Google Analytics, loaded only after you accept in the cookie banner. Legal basis: consent (Article 6(1)(a)). Declining is one click and loads nothing.
- Form abuse protection. Our forms use Cloudflare Turnstile to tell humans from bots without tracking you across sites. Legal basis: legitimate interest in protecting the site from abuse.
- Server logs. IP address, requested URL, timestamp and user agent, kept by our hosting infrastructure for security and troubleshooting. Legal basis: legitimate interest in operating the site securely.
3. What the products send (nothing, by default)
LM-Kit One and LM-Kit.NET run on your own infrastructure. Your documents, prompts and indexes are processed there and are not sent to LM-KIT. The products contact the network only for actions an operator takes deliberately, such as downloading a model; telemetry export exists but stays off until an operator enables it. The exact network behaviour is documented in the Trust Center.
4. Who receives your data
We do not sell, rent or trade personal information. Data is shared only with the processors needed to run this website, each bound by a data processing agreement:
- Microsoft Azure (Microsoft Ireland Operations Ltd): website hosting and server logs.
- Google Ireland Ltd: audience measurement, only after your consent in the cookie banner.
- Cloudflare, Inc.: Turnstile form abuse protection.
- The email infrastructure we use to receive and answer your enquiries.
Beyond these processors, personal data leaves LM-KIT only if the law requires it.
5. International transfers
Microsoft, Google and Cloudflare may process limited data in the United States; all three participate in the EU-US Data Privacy Framework, and transfers are additionally covered by the European Commission's Standard Contractual Clauses where applicable.
6. How long we keep it
- Enquiries and prospect records: up to 3 years after our last exchange, then deleted.
- Newsletter subscription: until you unsubscribe.
- Analytics data: at most 14 months.
- Server logs: at most 13 months.
- Contractual and billing records: the durations French commercial and tax law requires.
7. Your rights
Under the GDPR you can ask for access to your data, rectification, erasure, restriction of processing, portability, and you can object to processing based on legitimate interest. Where processing relies on consent, you can withdraw it at any time without affecting past processing. To exercise any of these rights, write to us through the contact page; we answer within one month. You can also lodge a complaint with the French supervisory authority, the CNIL (cnil.fr).
8. Cookies and analytics consent
Before you make a choice in the cookie banner, the site sets no analytics or advertising cookies; the only stored value is your consent choice itself, kept in your browser. If you accept, Google Analytics loads and sets its measurement cookies; if you decline, nothing loads, and both choices take the same single click. You can change your mind at any time through the cookie preferences link in the footer.
9. Changes to this notice
When this notice changes, the date at the top changes with it, and material changes are announced on the site before they take effect. Earlier versions are available on request.