Privacy Policy

Last updated: 4 November 2026

1. Who we are

Nivose is a trading name of Layor Yabag East, a French single-shareholder simplified joint-stock company (SASU) with a share capital of €1,000, registered with the Paris Trade and Companies Register under number 833 796 170, whose registered office is at 30 rue René Boulanger, 75010 Paris, France (VAT number FR52833796170). We publish the AI Sales Assistant module for PrestaShop and operate the service behind it. For anything related to this policy, write to bg@floreal.ai.

2. Who this policy applies to

• Merchants who install the module and create an account with us.
• Shop visitors who talk to the assistant on a merchant's store. For visitor data, the merchant is the data controller and Nivose acts as a processor on the merchant's behalf.

3. Data we process

• Merchant account: email address, shop URL, chosen plan and settings.
• Catalog data: product names, descriptions, prices, stock and image URLs synced from the merchant's PrestaShop store, so the assistant can answer about them.
• Conversations: the messages visitors exchange with the assistant and the assistant's answers, together with an anonymous visitor identifier, kept to provide the service and to let merchants review them.
• Billing: payments are handled by Stripe. We never see or store card numbers; we keep the subscription status and invoice references Stripe gives us.
• Technical data: server logs (IP address, timestamps, request metadata) kept for security and troubleshooting.

4. Why we process it

To run the service (the assistant cannot answer without the catalog and the conversation), to bill paid plans, to prevent abuse, and to improve the product. We do not sell personal data and we do not use conversations for advertising.

5. Service providers

We rely on the following providers, under their own data processing terms:

• Amazon Web Services (hosting, Stockholm region, European Union)
• OpenAI (language model that generates the assistant's answers)
• Pinecone (search index over the catalog)
• Stripe (payments)

Where a provider processes data outside the European Union, the transfer is covered by the European Commission's standard contractual clauses included in that provider's data processing terms.

6. Retention

Account and catalog data are kept while the merchant uses the service and deleted one year after the module is uninstalled or the account is closed. Conversations and server logs are kept for one year.

7. Your rights

Under the General Data Protection Regulation you have the right to access, correct, delete or export your personal data, and to object to or restrict its processing. Shop visitors should contact the merchant first; merchants and anyone else can write to bg@floreal.ai. You can also lodge a complaint with the French data protection authority (CNIL) or your local authority.

8. Cookies

This website sets no cookies. On a merchant's shop, the assistant uses the shop's own PrestaShop cookie to hold an anonymous visitor identifier, so the conversation can continue across pages, and the browser's session storage to remember whether the chat window is open. Both are necessary for the service to work and are not used for tracking.

9. Changes

We will post any change to this policy on this page and update the date above.