Privacy
This English text is a translation. The French version prevails in case of difference.
Data controller
Callum Torr, on behalf of Cairn Machines SAS, in formation, is the controller of your personal data. Address: Le Clot d’En Haut, Les Rodes, 09320 Biert, France. For any request about your data: contact@cairnmachines.com.
Purposes and legal bases
We process your data to answer your request and prepare a potential contract, on the basis of steps taken at your request before entering into a contract (GDPR Article 6(1)(b)). This covers the conversation with the assistant, the writing of the “What Cairn understood” summary and, if you send it, the handling of your request.
Abuse prevention and the technical monitoring of the use and cost of the service rely on our legitimate interest in keeping the service secure (GDPR Article 6(1)(f)). You may object at any time by writing to contact@cairnmachines.com.
Data collected
The chat processes the messages you enter and the assistant’s answers. Voice mode processes your voice and the spoken answers. The “What Cairn understood” summary is written from your conversation.
If you choose to send your request to the team, the form collects the content of the summary you reviewed, your email address for our reply and, if you wish, your name. The page language, the audience selected on the site and the conversation with the assistant are attached automatically: your written messages, the voice mode transcript and the answers, as you can read them before sending. Without a name, we derive one from your email address to label the request. The content of the summary and the email address are necessary to handle the request; without them, we cannot reply. A receipt reference and the date of receipt are added.
The server keeps technical counters without content (model used, number of tokens, durations, seconds of voice); no message, email address or IP address appears in them. To prevent abuse, it also counts requests per IP address, in memory only. We do not make decisions with legal effects on you based solely on automated processing.
Recipients and processors
Data is accessible to authorised people at Cairn Machines SAS and the providers needed to operate the service. It is not sold.
OpenAI Ireland Ltd generates the written assistant’s answers and writes the summary with store: false. In voice mode, audio is exchanged directly between your browser and OpenAI, which acts as a processor. Data is not used for model training. Abuse-monitoring logs may be retained for up to 30 days (unless required by law or for security). Transfers outside the European Union are covered by standard contractual clauses (SCCs). You can request a copy of the safeguards at contact@cairnmachines.com.
A sent request is saved on the site’s server and passed at once to the contact@cairnmachines.com inbox and to Cairn OS. Nylas delivers emails in its EU region. Google Workspace (Google Ireland Ltd) hosts the inbox. Contabo GmbH hosts the site in Germany. Cairn OS is our self-hosted internal register. If you write to contact@cairnmachines.com directly, your email arrives in that same inbox.
Retention periods
Until you send a request, the site does not store the content of the chat: it stays in your browser and leaves it only for the AI provider that processes it, passing through our server without being kept there. The site never stores voice mode audio. The technical usage and cost counters, without content, are retained for 13 months on the server, then deleted. The request counters per IP address are kept in memory only: one hour for text, the summary and sending a request, twenty-four hours for voice mode; they are cleared each time the server restarts.
A sent request, with its conversation, is retained for 90 days after it is received on the site’s server, then deleted. The Cairn OS inbox is retained for 90 days; the Cairn OS ledger keeps only a hash, with its source and date, which cannot identify the request. Prospect data, including the email received in the contact@cairnmachines.com inbox, is retained for 3 years after the last contact. You can ask for earlier erasure by quoting your receipt reference.
The summary and its versions, and your receipt reference, remain in your browser until cleared; you can remove them in your browser settings.
Your rights
You have rights of access, rectification, erasure, restriction, objection and, where applicable, portability. To exercise them, write to contact@cairnmachines.com or to our postal address above.
You may lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés), the French data protection authority. Its complaints page, in French: https://www.cnil.fr/fr/plaintes (opens in a new tab).
Cookies and storage
This site sets no cookies.
It uses two functional keys in your browser’s local storage (localStorage): cairn-brief keeps the “What Cairn understood” summary and its versions, and cairn-request-reference keeps the receipt reference of a sent request, on this device.
We use no sessionStorage, no audience measurement and no advertising trackers. Local storage serves only the features you ask for; it is exempt from consent, so no consent banner is displayed. See the guidance from the CNIL, the French data protection authority (in French): CNIL (opens in a new tab).
The artificial intelligence assistant
The assistant is an artificial intelligence (AI). It may make mistakes. Its answers are neither contractual nor legally binding. Only an agreement confirmed by us can bind us.
Do not share sensitive data under GDPR Article 9 (including health, origin, political opinions, religion, trade union membership, genetic or biometric data, sex life or sexual orientation), bank details or passwords.
Voice mode is used to answer and qualify your request. OpenAI Ireland Ltd processes your voice as a processor. Data is not used for model training. Abuse-monitoring logs may be retained for up to 30 days (unless required by law or for security). Transfers outside the European Union are covered by standard contractual clauses (SCCs).
Cairn Machines does not record or store the audio. The voice conversation transcript stays in your browser like your written messages and may feed the summary; it is retained only if you send a request: it then leaves with the attached conversation, to the same recipients and for the same periods as the request. The browser accesses the microphone only on your action, when you start voice mode.
Contact
For any question about your data: contact@cairnmachines.com, +33 6 69 53 52 15, or by post to the address above.