Everything you would have to ask us anyway.

1 — Publisher

Field	Value
Publisher	Khelion — trading name of a French sole proprietorship (entreprise individuelle)
Registration	SIREN 947 494 373 — Registre national des entreprises (RNE), France, registered 14 November 2022
Legal identity & address	Published in the French national business register, freely searchable by SIREN at annuaire-entreprises.data.gouv.fr
Contact	[email protected] — answered within two working days
VAT	Intra-EU VAT number pending issue — published here on receipt
Hosting	Cloudflare, Inc. — 101 Townsend St, San Francisco, CA 94107, United States — +1 650 319 8930

Khelion is a sole proprietorship: its legal identity, address and registration date are public data in the RNE and in the INSEE Sirene open database. They are not restated here, but they are one search away — the SIREN above is the key. The company currently has no open establishment: the establishment SIRET and the intra-EU VAT number are pending administrative issue, and both will be published here on receipt. Until then we do not invoice.

2 — What we do with data

Two very different situations, and we keep them separate.

This website. We collect nothing beyond what you send us. If you fill in the contact form, we receive your name, organisation, email and message, and we use them to answer you. Nothing else. We do not profile visitors, we do not run advertising trackers, and we do not sell or share anything.

An engagement. When we work for you, you are the data controller and we are a processor acting on your instructions. That relationship is governed by a written data processing agreement signed before any access, which names the categories of data, the purposes, the sub-processors, the retention period and the deletion procedure. Our standing commitments:

• Processing in the European Union by default, or inside your own environment when the engagement requires it.
• Personal data pseudonymised at ingestion wherever the work allows it.
• Model providers named in the warrant, per deployment — including options that do not train on your data.
• No client data used to train anything of ours. Ever. This is contractual, not a preference.
• Your log export and your warrants are yours, in open formats, during and after the engagement.

You can exercise your access, rectification, erasure, restriction, portability and objection rights at [email protected]. If our answer does not satisfy you, you may complain to the CNIL (cnil.fr).

3 — Cookies

This site sets no cookies, and there is no consent banner to click — not as a design flourish, but because we did the work needed to avoid one.

We do measure audience. We count page views, referrers, countries and browsers, in aggregate, using a cookieless tool that writes nothing to your device and builds no profile and no cross-site identifier. Under Article 82 of the French Data Protection Act, audience measurement is exempt from consent when it is strictly limited to that purpose, produces anonymous statistics, is used for the publisher alone, and is never cross-referenced with anything else. We hold ourselves to those four conditions. The CNIL does not certify tools, so we do not claim it does — we state the configuration and you can check it in your own browser: no cookie is set, and no identifier survives your visit.

The tool is Cloudflare Web Analytics, run by the same provider that already hosts this site — so measuring the audience adds no new third party with access to it. If we ever change tool, this paragraph changes with it, dated below.

Your language choice is the one thing kept in your browser, locally, and it never leaves it. Clearing your browser data removes it.

Our hosting provider processes your IP address to serve the page and to protect against attacks. That is a technical necessity of any website, not a tracking choice.

4 — What our agents may and may not do

This is the section most companies do not write. We do, because it is the product.

• Every agent we deploy carries a warrant: a signed document listing what it may do, what it may never do, when it must stop and ask, who supervises it, and how to halt it.
• The warrant is enforced while the agent runs. A forbidden action is refused, not merely logged after the fact.
• Autonomy is graded and the grade is written down: observe, advise, act on approval, act.
• No agent of ours contacts your customers, your staff or a third party without a named human sending it.
• No agent of ours makes a decision reserved to a qualified professional — a clinical judgement, a claims outcome, a screening decision, a legal interpretation.
• Every action, and every refusal, is written to an append-only log where each entry carries the hash of the previous one. A deleted or altered line shows.
• You can halt any deployment at any time through a named contact, documented at signature, reachable 24/7.

Where the EU AI Act applies to a system we operate for you, we support you as a provider or deployer as the case requires: technical documentation, event logging, human oversight arrangements and the information you owe your own users. We do not claim any certification we do not hold, and we hold none today.

5 — Security

• Access to client systems is least-privilege, time-bound and revocable by you at any moment.
• Secrets are never stored in prompts, in memory files or in logs.
• The log is append-only and hash-chained; integrity can be verified independently by you.
• We carry no third-party security certification today. When we obtain one we will name it here with its scope and date — and not before.
• To report a vulnerability, write to [email protected]. We answer within two working days and we will not pursue anyone who reports in good faith.

6 — Terms

Quotes are issued in euros excluding VAT, on identical terms for every buyer. A quote issued after the scoping fortnight is fixed and does not move without a written change of scope.

Every engagement carries a written kill rule agreed before we start: the number we accept to be judged on, the date it is measured, and what happens if we miss it. Intellectual property in your warrants, your evaluation set and your log is yours from day one. Handover of the configuration is a fixed fee agreed at signature, not negotiated on the way out.

French law applies. Before any court action we commit to a written attempt at resolution within thirty days.

7 — Changes to this page

This page is versioned like the rest of the site. When something material changes we date the change here rather than quietly replacing the text.

Last substantive update: 27 August 2026.