Privacy policy

Introduction

This privacy policy describes how Ambre LLC ("Blank", "we") collects, uses and protects the personal data of individuals who use the Blank service (the "Service"). The Service enables your users to submit source documents and receive in return structured deliverables automatically generated according to your internal formats. By using the Service, you are informed of the practices described in this policy. Processing is based on the legal grounds detailed below.

Data controller

The data controller for data collected in connection with the Service is:

Ambre LLC
Email: contact@blnksolutions.com

Our role: controller and processor

Depending on the nature of the data, Blank acts in two distinct capacities:

• Controller — for the data we collect in our own right to operate the Service: email address, account data, technical connection data. The rights described below are exercised directly with us.
• Processor — for the content of the documents you upload on behalf of your organisation. In that case, your organisation is the controller and Blank acts solely on its instructions, under a data processing agreement (DPA). Requests to exercise rights relating to that content are addressed to your organisation, which relays them to us where applicable.

Data collected

Blank collects only data strictly necessary for the operation of the Service:

• Email address — collected at login, used for identification and communication.
• Source documents — files uploaded by the user for deliverable generation (business plans, information memoranda, financial data, etc.).
• Technical data — standard connection information (IP address, browser type, timestamp) collected automatically for security and diagnostic purposes.

Blank does not collect browsing data for advertising purposes and does not use third-party cookies.

Use of data

Data collected is used for the following purposes:

• Service provision: processing source documents to generate the requested deliverables.
• Authentication and access management.
• Communication with the user in connection with the Service (generation confirmation, technical notifications).
• Security and Service integrity: detection of abusive or fraudulent use.
• Compliance with our legal obligations.

Third-party processing

Deliverable generation relies on artificial intelligence models provided by third-party suppliers. Source documents uploaded may be transmitted to these suppliers solely for the purpose of producing the requested deliverable. These suppliers are subject to strict contractual confidentiality obligations and are not authorised to use your data for any other purpose. In particular, they are not authorised to use your data to train or improve AI models.

Blank does not sell, rent or share your personal data with third parties for commercial or advertising purposes.

The categories of sub-processors we rely on, their location and transfer safeguards are detailed on our sub-processors page. The full named list is provided to our clients and prospects on request.

Legal bases for processing

In accordance with the General Data Protection Regulation (GDPR), each processing of personal data is based on one of the following legal grounds:

• Contract performance — processing is necessary to provide the Service: authentication, processing of source documents, generation of deliverables.
• Legitimate interest — processing is necessary for the security and integrity of the Service, prevention of fraudulent use, and improvement of the Service, in compliance with your fundamental rights.
• Legal obligation — processing is required to satisfy legal obligations applicable to Blank, in particular in tax matters or in response to requests from competent authorities.
• Consent — where required by law, we seek your explicit consent before any processing. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Data retention

Source documents uploaded are permanently deleted from our servers immediately after processing. Generated deliverables are retained for 48 hours to allow download, then automatically deleted. No content is retained, indexed, profiled or used to train a model beyond these periods.

For other data categories, retention periods are as follows:

• Data collected for contract performance — retained until the end of the contractual relationship with the client organisation.
• Data collected on the basis of legitimate interest — retained as long as necessary for the relevant purpose (security, fraud prevention, Service improvement).
• Data collected on the basis of consent — retained until consent is withdrawn.
• Data retained pursuant to a legal obligation — retained for the period required by applicable regulations (e.g. accounting records: 7 years).

Upon expiry of the applicable retention period, data is deleted. Rights of access, rectification, erasure and portability may no longer be exercised beyond that term.

Confidentiality of co-built formats

Templates and formats co-built with your organisation are specific to your structure and are never shared, communicated or made accessible to other organisations, including competing organisations. They constitute confidential assets of your organisation.

International data transfers

Ambre LLC is established in the United States. By using the Service, your personal data may be transferred to and processed outside the European Economic Area (EEA), in countries whose data protection legislation may differ from that applicable in your country.

When such transfers occur, Blank undertakes to put in place appropriate safeguards with the relevant suppliers, in accordance with GDPR requirements — European Commission Standard Contractual Clauses (Decision 2021/914) and/or the EU-U.S. Data Privacy Framework where the provider is certified — to ensure your data receives an equivalent level of protection to that applicable in the EEA.

For any questions about the safeguards applicable to your situation, contact us at contact@blnksolutions.com.

Cookies

The Service uses only functional cookies, strictly necessary for its operation: maintaining your session, remembering your language preferences and securing your access.

Blank does not use advertising cookies, behavioural tracking cookies, or cookies placed by third parties for targeting purposes. No browsing data is transmitted to advertising networks.

System logs and maintenance

For Service operation and maintenance purposes, technical data may be recorded automatically, including IP address, timestamps and any errors encountered. This data is used exclusively for diagnostic and troubleshooting purposes.

Anonymised audit logs are retained for up to one year for security and fraud prevention purposes. These logs record technical metadata only (timestamps, operation status, volume of data processed) and contain no document content or company name.

Use for legal purposes

User personal data may be used by Blank for legal purposes before courts or in proceedings preliminary to legal action arising from misuse of the Service. The user acknowledges that Blank may be required to disclose personal data at the request of competent public authorities.

Security

Blank implements appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration. These measures include encryption of data in transit and at rest, as well as restriction of access to authorised personnel only.

Your rights

In accordance with applicable personal data protection regulations, you have the following rights:

• Right of access — you may request to consult the personal data we hold about you.
• Right of rectification — you may request correction of inaccurate or incomplete data.
• Right to erasure — you may request deletion of your personal data, subject to our legal obligations.
• Right to object — you may object to the processing of your data in certain circumstances.
• Right to restriction — you may request restriction of the processing of your data in the cases provided for by the GDPR.
• Right to portability — you may request to receive your data in a structured, machine-readable format.
• Right to lodge a complaint — you may lodge a complaint with a supervisory authority, in particular the CNIL (the French data protection authority).

These requests are free of charge and may be addressed to contact@blnksolutions.com. We will respond as promptly as possible and within one month at the latest, in accordance with applicable regulations.

Where a request for rectification, erasure or restriction of processing is granted, Blank will inform each recipient to whom the data has been communicated, unless this proves impossible or requires disproportionate effort.

Minors

The Service is intended exclusively for professionals and organisations. It is not intended for persons under 16 years of age. Blank does not knowingly collect personal data relating to minors. If you believe that a minor has communicated personal data to us, contact us at contact@blnksolutions.com so that we may delete it.

Further information

Additional information on the collection or processing of personal data may be requested at any time from Blank at contact@blnksolutions.com.

Amendments

We may update this policy at any time. The version date at the top of this document will be modified accordingly. By continuing to use the Service after any modification, you accept the revised policy.

Contact

For any questions regarding this policy or the processing of your data: contact@blnksolutions.com