Skip to main content
Bonjour AIBonjour — verified
Privacy

Your data belongs to you

GDPR-native. Zero-Knowledge by default. No dark patterns.

Controller

Un Pour Tous Et Tous Pour Un (RNA W751278475) is the data controller for BonjourBonjour — verified.

What we collect

  • Account: name, email, hashed password, role.
  • Usage: activity log kept for analytics and auditability.
  • Payments: handled by Stripe and PayPal — we never see card numbers.
  • Sanctuary files: encrypted in your browser; we cannot read them.

Sanctuary mode

When Sanctuary mode is on, files and AI drafts are encrypted with AES-GCM 256 before they leave your device. Keys live in memory and are wiped when you close the tab.

48-hour rule

Files uploaded in Sanctuary mode are automatically deleted after 48 hours. The activity log stays for statistical analysis but never contains file contents.

Your rights

Access, rectification, erasure, portability, restriction and objection — write to us. You may also lodge a complaint with the CNIL. contact@unpourtousettouspourun-asso.fr

Sub-processors

Cloudflare (hosting), managed database and authentication infrastructure in the European Union, Stripe, PayPal and the AI gateway.

Zero-Knowledge Encryption

What is Zero-Knowledge?

Zero-Knowledge encryption means your data is encrypted on your device before it ever reaches our servers. We literally cannot read your data — even if we wanted to.

How it works

  1. You create data (files, AI queries, notes).
  2. Your browser encrypts it using AES-GCM 256-bit encryption.
  3. Only the encrypted data is sent to our servers.
  4. You hold the keys — stored only in your browser's memory.
  5. Automatic deletion after 48 hours.
  6. You decrypt locally when you need to access your data.

Legal compliance

  • ✅ GDPR compliance — we don't process your personal data.
  • ✅ French AI Law (2026) — exceeds requirements by design.
  • ✅ Data sovereignty — your data stays yours.
  • ✅ No data breaches possible — we have nothing to leak.

Sanctuary Mode

  • All AI queries are encrypted client-side.
  • Files are encrypted before upload.
  • Keys never leave your device.
  • Automatic 48-hour deletion.
  • Complete privacy guaranteed.