Privacy Policy

Who is responsible

Bastille-C3 is operated by Elouarn de Kerros, France. For the personal information handled by the Bastille-C3 website and correspondence, Elouarn de Kerros is the data controller. Contact bastilleworks@mailo.com, or use the privacy request form.

This policy covers the marketing website and our handling of support, billing, privacy and abuse correspondence. It also explains the boundary between customer-hosted software and external services used for licensing or payment.

Customer-hosted products

Bastille-C3 products are installed by you on infrastructure you control. Bastille-C3 does not provide an agent-hosting runtime. Your code, prompts, model responses, retrieval indexes and self-hosted Console audit content are not uploaded to Bastille-C3 infrastructure by ordinary customer-hosted product operation.

You choose and configure your harness, LLM providers, integrations and infrastructure. A cloud model provider may receive the prompts and other information you send to it. Optional external retrieval or model features make the connections you configure. These services have their own privacy terms; “customer-hosted” does not mean that every network connection is disabled.

You are responsible for access controls, backups, retention and lawful processing within your deployment. If you deliberately send logs, screenshots or other content to support, that material becomes part of your correspondence. Redact confidential data and credentials first.

Website hosting and analytics

The marketing website uses Cloudflare Pages for hosting and Cloudflare Web Analytics to understand site usage and page performance. Analytics is enabled. Cloudflare describes Web Analytics as cookie-free and does not use it to track people across customers’ websites.

Hosting and security require processing connection information such as an IP address and request metadata. Analytics covers information such as visited pages, referring sites, approximate geographic or device/browser categories, and performance timings. It does not collect your locally selected archive, module-search text, or agent workload through our application code.

We use this information for the legitimate interests of maintaining a reliable, secure website and understanding its use. Where applicable law requires consent for a particular analytics configuration, that configuration must be used only with the required consent. Cloudflare security features may use their own necessary cookies; checkout services may also use cookies under their separate policies.

Read Cloudflare’s Privacy Policy and Web Analytics data-collection documentation for provider details. We do not add advertising pixels, mailing-list enrollment, or cross-site profiling to the forms on this website.

Messages and reports

When you submit a form or email us, we receive the information you supply: your email address, optional name, request type, message, and any optional team size, order reference or troubleshooting history. A form submission receives a request reference. We do not need your password, full license key, API secret, or confidential customer code.

Website forms are processed by a Cloudflare Pages Function and sent through Resend to the Bastille-C3 mailbox at Mailo. These providers process the message and necessary delivery or security metadata. The website does not maintain a public support-ticket database. Correspondence is handled in the support inbox and the providers’ delivery systems.

We process inquiries and support requests to take steps at your request or perform our contract. We handle abuse, security and operational correspondence for legitimate interests, and legal-rights or compliance requests where necessary to meet legal obligations. Submitting a request is not consent to receive marketing emails.

Provider information: Resend Privacy Policy and Mailo Privacy Policy.

Payments and license validation

Purchases are processed through Polar, not through a payment form hosted by this marketing site. Polar handles checkout, payment, subscription and related licensing information under its own terms and privacy policy. Payment-card details are not entered into or stored by the Bastille-C3 website.

We may access order, customer, subscription and entitlement information made available to the seller by the payment provider when needed for fulfillment, support, cancellation, refund handling and legal records.

Paid Bastille-C3 license tools contact Polar for activation, validation and periodic entitlement refresh. This involves the credentials and activation or entitlement metadata required by the licensing service, not uploading your code, prompts, retrieval collections or audit content to Bastille-C3. Review Polar’s Privacy Policy for its processing.

Retention and recipients

We retain correspondence for as long as reasonably needed to handle the request, troubleshoot an ongoing issue, investigate abuse, or resolve a dispute. Records required for accounting, consumer protection or other legal obligations are retained for the applicable statutory period. When those purposes no longer apply, records should be deleted or anonymized. Provider-side delivery, hosting and analytics records follow the relevant provider’s retention settings and obligations.

Access is limited to the operator and providers needed to host the site, deliver correspondence, process payments or validate licenses. Information may also be disclosed when required by law or necessary to establish or defend legal claims. We do not sell your personal information.

Some providers may process data outside the European Economic Area. Transfers must rely on applicable safeguards, such as an adequacy decision or standard contractual clauses, where required. Contact us for information about the safeguards applicable to your request.

Your rights

Depending on applicable law, you can request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. We may need proportionate information to verify your identity before acting on a request.

Email bastilleworks@mailo.com, or choose “Privacy request” on the support page. You may also complain to your competent data-protection authority, including the CNIL in France.

Changes

We update this policy when processing changes. The date above identifies the current website version. A change to this notice does not authorize retroactive use of your information for an incompatible purpose.