RoboHearts.AI Privacy Policy

RoboHearts.AI is operated by RoboHearts SAS, France. Contact: [email protected]

This privacy policy explains how we handle personal data when you use RoboHearts.AI.

What data do we collect?

We may collect and use:

  • your name and email address
  • account and access data, such as login, verification, and password reset information
  • organization membership and account role information
  • guest access data, such as guest display names and guest session status
  • robot and device-related data, such as robot identifiers, pairing information, and activity timestamps
  • files and related metadata that you upload to the service
  • records of requests you send to us, including account deletion requests

RoboHearts.AI is not designed for character content, commentary, QiChat content, or uploaded assets to contain personal data. If personal data is included there anyway, it may still be stored and processed as part of the service.

How do we collect your data?

We collect data when you:

  • create an account
  • log in
  • verify your email address
  • reset your password
  • use guest access
  • pair or manage robots
  • upload files
  • contact us or request account deletion

Why do we use your data?

We use personal data to:

  • provide the service
  • manage accounts and access
  • operate guest access features
  • operate robot-related features
  • process uploads
  • maintain security
  • handle support and administrative requests

Legal basis

We process personal data based on:

  • performance of a contract (providing the service)
  • legitimate interests (security, abuse prevention, service operation)

How data flows in the system

Depending on the feature used:

  • account and configuration data are processed by RoboHearts servers
  • speech input may be processed by RoboHearts-operated speech recognition services
  • LLM interactions are typically sent directly from the client application to third-party providers using user-provided API keys
  • in some cases (such as trials or default configurations), RoboHearts may provide an API key and act as an intermediary

RoboHearts primarily provides tools to configure and manage robot applications. In many cases, conversational data does not pass through RoboHearts servers.

AI and speech processing

  • LLM interactions are usually performed directly between the client app (on robot/device) and the selected provider
  • RoboHearts does not receive or store these conversations in those cases
  • audio data may be processed by RoboHearts-operated speech recognition services
  • this processing is transient and audio data is not stored

Data sharing

We may share personal data with service providers necessary to operate the service, including:

  • our hosting provider
  • email delivery providers

We have appropriate Data Processing Agreements in place with these sub-processors.

We do not sell personal data.

RoboHearts.AI does not transmit user personal data to AI providers.

When AI features are used, interactions are sent directly from the robot-side client application to the selected provider using user-supplied API keys. These interactions do not pass through RoboHearts servers.

International transfers

Some features of RoboHearts.AI allow client applications to interact with third-party providers (such as AI services), which may be located outside the European Economic Area.

These interactions are performed directly by the client application using user-supplied API keys. RoboHearts does not control these transfers.

Where RoboHearts uses third-party providers directly, appropriate safeguards are applied.

Cookies and similar technologies

The current RoboHearts.AI application does not use cookies for login sessions or analytics.

Authentication tokens are stored in the browser (e.g. local storage) to maintain session state.

How do we store your data?

We store personal data in the systems needed to operate RoboHearts.AI, including application data storage, uploaded file storage, and browser storage used by the web application.

Passwords are stored in hashed form rather than as plaintext passwords.

Logging

We may log technical information, including identifiers and request data, for security, debugging, and operational purposes.

Public file access

Some uploaded files may be accessible via direct links. These links are not indexed but may be accessed by anyone who has the link.

How long do we keep your data?

We retain:

  • account and configuration data until account deletion
  • logs for a limited period (typically a few weeks)
  • short-lived tokens according to their expiry

Some data may persist longer where required for legal or operational reasons.

Account deletion

Account deletion requests are currently processed manually.

Requesting deletion does not automatically result in immediate removal of all associated data.

Your rights

Depending on applicable law, you may have the right to:

  • access your personal data
  • correct inaccurate personal data
  • request deletion of your personal data
  • restrict processing
  • object to processing
  • request data portability

To exercise these rights, contact us at [email protected].

Other websites

RoboHearts.AI may contain links to other websites. This privacy policy applies only to RoboHearts.AI.

Changes to this privacy policy

We may update this privacy policy from time to time. This version was last updated on April 20, 2026.

Contact

If you have questions about this privacy policy or the way we handle personal data, contact:

[email protected]

Supervisory authority

You have the right to lodge a complaint with the French supervisory authority:

Commission Nationale de l’Informatique et des Libertes (CNIL) https://www.cnil.fr