Privacy policy — LightOn

Cited by

Facts read from this source

• Entity Report an error

  “LightOn’s headquarters are located 2 rue de la Bourse, 75002 Paris, France. Our company is registered in the SIREN directory under number 821100690.”

• Controller Report an error

  “LightOn is the data controller for the processing of personal data it carries out on its own behalf.”

• Processor role Report an error

  “When the Customer submits personal data to the Paradigm APIs via Paradigm, the Console, or directly, LightOn acts as a processor within the meaning of Article 28 of the GDPR and processes such data solely in accordance with the Customer’s instructions and the provisions of the Data Protection Agreement (DPA).”

• No training on customer data Report an error

  “No use for training purposes: LightOn does not use the input and output data (prompts and completions) submitted or provided via the APIs to train, fine-tune, or improve its AI models, except upon the Customer’s explicit written request.”

• Stateless inference Report an error

  “Stateless inference: in SaaS inference mode or in any mode where the inference nodes are under LightOn’s control, input data (prompts, documents, etc.) is not stored persistently on the compute nodes beyond the time strictly necessary to execute the request.”

• DPA available Report an error

  “The list of processors is referenced in the DPA, available upon request at compliance@lighton.ai.”

• Retention billing metrics Report an error

  “Usage metrics (billing and capacity): API call volumes, processed tokens, storage space, and aggregated timestamps, excluding the content of requests, prompts, or completions: retained for the duration of the contract and up to 13 months after its expiration, for billing, accounting reconciliation, and capacity planning purposes.”

• Retention access logs Report an error

  “Access logs and technical logs (security and reliability): timestamp, API key ID, endpoint called, source IP address, HTTP status code, latency, request headers, and error traces, excluding request content, prompts, or completions: retained for up to 90 days for the purposes of abuse detection, fraud prevention, quota enforcement, security incident investigation, and audit trail maintenance in accordance with our legal, regulatory, and contractual obligations.”

• Retention contract data Report an error

  “Data collected when purchasing a product or service: for the duration of the contractual relationship and 3 years after the end of the contract (interim archiving in accordance with legal or regulatory obligations and liabilities, up to 10 years after the end of the business relationship, particularly with regard to billing data).”

• Retention connection Report an error

  “Connection data collected in connection with the use of our online applications and services (IP address, browsing history, etc.): up to 6 months.”

• Retention recruitment Report an error

  “Data processed during recruitment management (including unsolicited applications): 2 years after the last contact with the candidate, unless there is an express request to shorten this period.”

• Credit card not stored Report an error

  “LightOn account data: professional email address, name, organization, billing information (credit card data is transmitted directly to the payment provider and is not stored by LightOn).”

• Location Report an error

  “The processing that LightOn may perform on personal data is primarily carried out in data centers hosted by its service providers, in France or in Europe.”

• Scc transfers Report an error

  “LightOn works with third parties that provide all necessary safeguards, and in particular with those with whom LightOn has signed the European Commission’s standard contractual clauses.”

• Sentry Report an error

  “Furthermore, LightOn may use the services of Sentry Inc. to monitor the Console and Paradigm web interfaces. Data transmitted to Sentry, if telemetry and/or error monitoring are enabled, is subject to the Standard Contractual Clauses (SCCs) adopted by the European Commission, as well as a Data Processing Agreement (DPA) available at https://sentry.io/legal/dpa/. LightOn has also implemented Sentry Relay within its systems to filter personal data before it is transmitted to Sentry.”

• Breach notification Report an error

  “we will inform you as soon as possible and notify the supervisory authority (the CNIL in France) within a maximum of 72 hours in accordance with Article 33 of the GDPR.”

• Session replay consent Report an error

  “Sentry Session Replay is only enabled upon explicit consent obtained through the user’s or client’s account settings in the Console interface.”

• Session replay masking Report an error

  “LightOn applies maskAllText: true and blockAllMedia: true: all displayed or entered text and all images are masked (replaced by asterisks or opaque blocks) on the browser side before any transmission to Sentry.”

• Session replay retention Report an error

  “Retention period: 90 days on Sentry servers, with automatic deletion.”

• Error reporting consent Report an error

  “Sentry Error Reporting is configured without setting persistent identifying cookies and is classified as a technically necessary tracker, requiring no prior consent.”

• Call recording Report an error

  “They are retained for a maximum of 30 days, except in the event of a dispute, in which case they are retained for the duration of the dispute and until all avenues of appeal have been exhausted.”

• Chat retention Report an error

  “When you communicate with our services via online chat (internal messaging chatbox), the entirety of your communications may be retained for a maximum of 2 months.”

• No advertising Report an error

  “We do not display advertising on our websites.”

• No data sale Report an error

  “LightOn will not rent or sell personal data to third parties without the explicit consent of the individuals concerned or following an explicit action on the part of the individual concerned.”

• Frameworks Report an error

  “European Regulation 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, often referred to as the GDPR); French Law No. 78-17 of January 6, 1978, on Information Technology, Data Files, and Civil Liberties, and its amendments.”

• Document drafting source Report an error

  “This document was drafted based on materials provided by SysStreaming, which has granted LightOn the necessary rights to use them.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Automation Lead Data use, training & retention
• The Automation Lead Models & processing location
• The Automation Lead European sovereignty
• The Automation Lead Pricing transparency
• The Automation Lead Data use, training & retention
• The Automation Lead Models & processing location
• The Automation Lead European sovereignty
• The Automation Lead Pricing transparency
• The Customer-Service Director Data use, training & retention
• The Customer-Service Director Models & processing location
• The Customer-Service Director European sovereignty
• The Customer-Service Director Pricing transparency
• The Customer-Service Director Data use, training & retention
• The Customer-Service Director Models & processing location
• The Customer-Service Director European sovereignty
• The Customer-Service Director Pricing transparency
• The Data Protection Officer Data use, training & retention
• The Data Protection Officer Models & processing location
• The Data Protection Officer European sovereignty
• The Data Protection Officer Pricing transparency
• The Data Protection Officer Data use, training & retention
• The Data Protection Officer Models & processing location
• The Data Protection Officer European sovereignty
• The Data Protection Officer Pricing transparency
• The Head of IT Data use, training & retention
• The Head of IT Models & processing location
• The Head of IT European sovereignty
• The Head of IT Pricing transparency
• The Head of IT Data use, training & retention
• The Head of IT Models & processing location
• The Head of IT European sovereignty
• The Head of IT Pricing transparency
• The Skeptic Data use, training & retention
• The Skeptic Models & processing location
• The Skeptic European sovereignty
• The Skeptic Pricing transparency
• The Skeptic Data use, training & retention
• The Skeptic Models & processing location
• The Skeptic European sovereignty
• The Skeptic Pricing transparency
• The Works Council Member Data use, training & retention
• The Works Council Member Models & processing location
• The Works Council Member European sovereignty
• The Works Council Member Pricing transparency
• The Works Council Member Data use, training & retention
• The Works Council Member Models & processing location
• The Works Council Member European sovereignty
• The Works Council Member Pricing transparency