Table of contents / Sommaire
Overview
Cléprix.com (“Cléprix”, “we”, “us”) provides insurance-document collection, educational explanation, risk-card, report and workflow services for consumers. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when these services are used.
Controller and contact
The controller and business operator is PETIT BONHEUR INTERNATIONAL, a French société par actions simplifiée (SAS), SIREN 949 484 265, SIRET 949 484 265 00010, VAT number FR83 949484265. Contact address: 79 Rue de Patay, 75013 Paris, France. Service questions, privacy requests, deletion requests and legal notices should be sent to support@cleprix.com.
Scope of this notice
This notice applies to cleprix.com, its static pages, upload forms, email report flows, Custom GPT handoff pages, SEO/GEO resources, future account areas, report requests, support communications and related analytics or security logs. Third-party websites, payment processors, Custom GPT interfaces and model providers have their own terms and privacy notices.
Data we may collect
- Contact data: email address and messages you send.
- Submission data: insurance category, document category, provider name if provided, visible price if provided, main question, selected report path, language and consent choices.
- Uploaded files: insurance quotes, renewal notices, contracts, coverage tables, invoices, claim emails, screenshots and related files.
- Technical data: IP address or truncated/hash version, browser, device, approximate region, referrer, UTM parameters, timestamps, event logs, upload velocity, file type, file size bucket and error logs.
- Payment workflow data: payment status, checkout identifiers and limited transaction metadata. Full card data should be handled only by the payment processor.
- Quality signals: duplicate file hashes, OCR quality, extraction confidence, suspected low-quality or fake material indicators, failed upload events and user feedback.
Sensitive data and minimization
Insurance documents can contain personal data and sometimes sensitive information. You should mask unnecessary identifiers before upload: name, phone, email, full address, bank details, policy number, plate number, claim reference, national ID, social security number and full licence numbers. Do not upload health records, full identity documents or bank statements unless specifically needed and requested in a future protected workflow. We aim to collect the minimum data needed for the selected report path.
Purposes of processing
- Receive and organize your submission package.
- Provide a free risk-check handoff or prepare Plus/Pro/Family report workflows.
- Send email status updates and report delivery messages.
- Respond to support, privacy and deletion requests.
- Prevent abuse, spam, fraud, malware, duplicate submissions and misuse.
- Improve document schemas, glossary, risk flags, prompts, templates and regression tests using privacy-preserving and aggregated signals where possible.
- Comply with legal, tax, payment, accounting, security and record-keeping obligations.
Legal bases
For EU/UK visitors, possible legal bases include performance of a requested service, consent where required, legitimate interests in security, fraud prevention and product improvement, compliance with legal obligations, and establishment or defense of legal claims where applicable. Consent must be freely given, specific, informed and unambiguous, and users should be able to withdraw it. We separate optional benchmark or marketing consent from necessary service processing where feasible.
AI, automation and human review
Cléprix may use AI systems, templates and human review to prepare explanations, risk cards, missing-field lists, draft questions or report sections. AI output can be incomplete or wrong. High-risk issues, claim disputes, legal questions, unclear liability, suspected fraud or low-confidence outputs may require human review or may be refused. We do not use AI output as a binding insurance decision.
Custom GPT and external assistants
Free risk checks may route users to a Custom GPT or other external AI interface. Information entered there is handled under that provider’s account, product and privacy terms. Do not paste unnecessary identifiers. When the Custom GPT action is used, Cléprix may receive and store low-sensitivity structured fields such as language, insurance category, document category, the user question, visible risk summary, missing-field list, consent choice and optional email for follow-up. The Custom GPT action is not a raw-document upload channel, does not generate Plus/Pro/Family reports, does not start payment, and does not trigger customer delivery. Complete report workflows, uploads, payment, Victor review and delivery remain on the website or internal workflow.
Uploaded documents
Uploaded files are kept in non-public storage with access limited to authorized workflows and personnel. Files may be scanned for malware, duplicate hashes, file type, size and quality. We may reject archives, executable files, suspicious files, abusive submissions or files outside the allowed formats.
Service providers
We may use hosting, storage, email, payment, analytics, security, AI/model, OCR, logging, customer support and workflow providers. Providers should process data only under contract and for authorized purposes. Examples of provider categories include static hosting, object storage, transactional email, payment checkout, AI APIs, spam prevention and error monitoring.
International transfers
Depending on the providers required for a request, limited data may be processed in the European Economic Area, the United States or another country. Transfers are limited to what is necessary for the service and are subject to the safeguards required by applicable law. Information about the safeguards relevant to a specific request is available from support@cleprix.com.
Retention
We retain personal data only while it is reasonably necessary for the requested service, report delivery, support, security, dispute handling and applicable legal, tax, payment or accounting obligations. The duration depends on the type of record, whether a submission is incomplete or delivered, whether support remains open, and whether a legal hold or mandatory record-keeping rule applies. Raw uploads and report working files are reviewed for removal when they are no longer needed; transaction and accounting records may be retained for the legally required period; security logs may be retained for incident investigation; and irreversibly anonymized aggregate information may be kept because it no longer identifies a person. A user may request deletion at support@cleprix.com, subject to identity verification and any lawful exception. Expiry of a report-download link does not by itself mean that every related support or accounting record has been deleted.
Security
We use reasonable technical and organizational measures such as access controls, private storage, least-privilege workflows, transport encryption, file-type restrictions, logging, backups and staff/process limitations. No internet service is perfectly secure. Users should avoid uploading unnecessary sensitive data and should keep copies of important originals.
EU/UK/US privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict, object, withdraw consent, data portability, opt out of certain processing, limit sensitive data use, and complain to a supervisory authority. EU GDPR rights include information, access, rectification, erasure, restriction, portability and objection. US state rights may include access, deletion, correction, portability and opt-out rights. To exercise rights, contact support@cleprix.com. You may also lodge a complaint with a competent supervisory authority, including the CNIL in France. We may verify your request and retain limited records to document compliance.
Children
Cléprix is not intended for children. Do not submit documents for minors unless you are a parent/legal guardian or authorized representative and the document is necessary for the requested insurance-document workflow.
Marketing and communications
We may send service emails related to submissions, reports, support and security. Marketing emails require consent where applicable and should include an unsubscribe option. We do not sell insurer leads as part of the current product concept.
Changes
We may update this Privacy Policy as the product, providers, laws and workflows evolve. Material changes are posted on the website with an updated date. Continued use after changes may be treated as acceptance where permitted by law.
Contact
Operator and controller: PETIT BONHEUR INTERNATIONAL (SAS), SIREN 949 484 265, SIRET 949 484 265 00010.
Contact address: 79 Rue de Patay, 75013 Paris, France.
Email: support@cleprix.com.