Pan-l Logo
BETA
Get Started

Privacy Policy

The Platform (hereinafter referred to as the "Platform") is published by Devtree SAS, a simplified joint-stock company with a capital of 1,000 euros, registered at the Paris Trade and Companies Register under number 981202 583, with its registered office at 13 Bis avenue de la motte-picquet 75007 Paris (hereinafter referred to as "Devtree"), which, as the data controller, places great importance on the protection and respect of your privacy.

This privacy policy aims to inform any person using the Platform (hereinafter referred to as "Users" or "User") of Devtree's practices regarding the conditions of collection, use and sharing of information that Users provide, as well as their rights.

The Platform complies with French and European standards relating to the protection of privacy and personal data, particularly Law No. 78-17 known as "Data Protection Act" of January 6, 1978 relating to information technology, files and freedoms, as amended by Law 2004-801 of August 6, 2004, and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, known as "GDPR" on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

Important Notice to Users

ANY NAVIGATION ON THE PLATFORM AFTER THE PUBLICATION OF THIS PRIVACY POLICY CONSTITUTES UNCONDITIONAL ACCEPTANCE OF IT.

If you wish to withdraw your consent regarding the processing of your data, you can make this request directly by email at: hello@devtree.fr

Furthermore, where required by law and/or in certain circumstances, your consent will be obtained or an option to refuse will be provided before any data transmission.

1. Definitions and Data Controller

This Privacy Policy explains how DEVTREE SAS (the "Company", "we", "us", or "our"), located at 13 Bis avenue de la motte-picquet 75007 Paris, France, collects, uses, and protects your personal information when you use our Pan-l services.

Key Definitions

  • "Services" refers to the Pan-l widget, dashboard interface, and all associated functionalities
  • "Widget" refers to the JavaScript component that can be embedded on third-party websites
  • "Platform" refers to the Pan-l website and dashboard interface
  • "Personal Data" means any information relating to an identified or identifiable natural person
  • "Processing" means any operation performed on personal data

The data controller for personal data collected is Devtree SAS.

2. Types of Data Collected

The data collected on the Platform as part of its use are those that allow Devtree to identify Users directly or indirectly.

This may include the following categories of data concerning Users:

  • Civil status, identity, identification data such as name, first name, email address, and phone number
  • Data related to professional life such as company name and position
  • Economic and financial data such as payment data
  • Navigation data such as cookies and trackers
  • Technical data related to widget usage and integration
  • Content analysis data processed through our AI services
  • Voice data collected through the Pan-l widget
  • Data related to the use of the Pan-l widget

3. Purpose, Legal Basis and Data Collected

3.1 Purpose of Personal Data Collection

Personal data collected on the Platform are used only for and during the execution of services for the following purposes:

  • Service provision management:
    • User account management
    • Payment processing
    • Communication with Users
    • Widget integration and functionality
    • AI content analysis services
  • Platform operation and continuous improvement:
    • General Platform administration
    • Platform security management
    • Information collection through cookies
    • Service optimization and enhancement

3.2 Legal Basis for Processing

Processing activities and personal data collection are authorized based on the following legal grounds:

  • Performance of contractual obligations for service provision
  • User consent for cookie placement
  • Legitimate interest in ensuring optimal Platform operation and quality
  • Legal obligations when applicable

3.3 Information You Provide Directly

  • Account Information: Name, email address, password, and profile information
  • Contact Information: Email address, phone number, and company details
  • Payment Information: Billing address and payment method details (processed by third-party payment processors)
  • Support Communications: Messages, feedback, and support requests
  • Integration Credentials: OAuth tokens and API keys for third-party service connections

3.4 Information Collected Through Widget Usage

  • Web Page Content: HTML content selected by users through explicit selection, full page scans, or AI-assisted selection
  • Audio Data: Voice recordings processed by ElevenLabs.io for transcription and analysis
  • Usage Analytics: Widget interactions, feature usage, and performance metrics
  • Technical Data: IP addresses, browser information, device identifiers, and session data

3.5 Information from Third-Party Services

  • Integration Data: Information from connected services (Google, Slack, Trello, Hubspot and any other service that can be connected to the Pan-l widget)
  • Authentication Data: Profile information from OAuth providers
  • Service Actions: Records of actions performed on connected platforms

4. How We Use Your Personal Information

4.1 Service Provision and Performance

  • Provide and maintain the Pan-l services and widget functionality
  • Process web page content through AI systems for component identification and structuring
  • Execute user-requested actions on connected third-party services
  • Facilitate secure connections to external platforms via integration partners

4.2 Account Management and Communications

  • Create and manage user accounts and authentication
  • Process subscription payments and billing
  • Send service-related notifications and updates
  • Provide customer support and respond to inquiries

4.3 Service Improvement and Analytics

  • Analyze usage patterns to improve service functionality
  • Monitor system performance and security
  • Develop new features and enhancements
  • Generate aggregated and anonymized statistics

4.4 Legal Basis for Processing

We process your personal data based on: (1) Contract performance for service delivery, (2) Legitimate interests for service improvement and security, (3) Consent for marketing communications, and (4) Legal obligations for compliance requirements.

5. Data Collection Timing

Data is collected by Devtree in the following circumstances:

  • When Users freely provide it during Platform registration
  • When Users integrate the widget into their websites
  • During Platform navigation
  • During service usage (widget interactions, AI analysis requests)

6. Data Recipients

The primary recipient of personal data collected on the Platform is Devtree.

Personal data is not shared with third parties except for Devtree's partners whose access to personal data is necessary for the provision of services (account management, AI processing, and payment management).

These partners are contractually bound to respect data protection regulations including GDPR and future applicable regulations.

6.1 AI Processing Partners

  • OpenAI: AI models for content analysis and AI actions
  • Anthropic: AI models for content analysis and AI actions
  • Google: AI models for content analysis and AI actions
  • Local Models: Ollama-hosted models (Gemma, Qwen, Mistral, Deepseek) for content analysis and AI actions

6.2 Integration and Service Partners

  • ElevenLabs.io: Audio processing and text-to-speech services
  • Picaos.com: Third-party service connection facilitation
  • Clerk.com: Authentication and user management
  • Supabase.com: Database management
  • Stripe.com: Payment processing
  • Integration Platforms: OAuth providers and API connection services powered by Picaos.com

6.3 Data Sharing Principles

  • We only share data necessary for service functionality
  • All third-party processors are bound by appropriate data protection agreements
  • We do not sell or rent personal data to third parties
  • Data sharing is limited to the purposes outlined in this policy

7. Data Retention and Deletion

7.1 Retention Periods

  • Account Data: Retained until account deletion or 2 years after last activity
  • Usage Analytics: Aggregated data retained for 3 years for service improvement
  • Payment Records: Retained for 10 years for legal and tax compliance
  • Support Communications: Retained for 2 years for service quality purposes

7.2 Automatic Data Purging

Inactive accounts are automatically reviewed and deleted after retention periods

8. Web Page Processing and Storage

Web Page Processing and Storage

When you use our widget to analyze web pages, we process and store the following data:

  • Content Processing:
    • HTML content from authorized pages selected by users or scanned with permission
    • For voice-based requests, the complete HTML content of the page is stored with the transcribed audio
    • Analysis results and AI-generated insights
    • Component structure and relationships
    • User interaction patterns and preferences
  • Usage Context:
    • URLs of processed pages
    • Selection patterns and methods used
    • AI actions requested and their outcomes
    • Performance metrics and error logs
  • Storage Safeguards:
    • Content is only processed from pages explicitly authorized by site administrators
    • Data retention is aligned with task management and tracking requirements
    • Personal data is processed in accordance with task management needs
    • Users have control over their stored content through their dashboard
    • Security measures are in place to protect stored data
  • Usage of Stored Data:
    • Maintaining task history and tracking information
    • Enabling cross-service task management
    • Improving component detection and service functionality
    • Analyzing patterns to enhance user experience
    • Supporting integration with third-party services
  • Data Processing and Third-Party Services:
    • AI Processing Partners:
      • OpenAI: Content analysis and AI actions via GPT models
      • Anthropic: Content analysis and AI actions via Claude models
      • Google: Content analysis and AI actions via Gemini models
      • Local Models: Content processing via Ollama-hosted models (Gemma, Qwen, Mistral, Deepseek or any other model)
    • Operational Services:
      • ElevenLabs.io: Voice processing and text-to-speech conversion
      • Picaos.com: Service connection facilitation and AI action processing
      • These services may temporarily store data for processing
    • Integration Partners:
      • Connected platforms (Google, Slack, Trello, Hubspot, etc.)
      • Receive AI-processed and transformed data
      • Process data according to their respective privacy policies
  • Data Flow and Processing:
    • Selected content is processed through multiple services:
    • 1. Initial Processing:
      • Content selection and structuring
      • Voice-to-text conversion if applicable
      • Preliminary AI analysis
    • 2. AI Processing:
      • Content analysis by selected AI models
      • Generation of actions and insights
      • Data transformation for service integration
    • 3. Service Integration:
      • Data formatting for target services
      • API communication and data exchange
      • Response processing and storage
  • Data Protection Measures:
    • Content is retained as needed for task management functionality
    • Historical data is maintained for task tracking purposes
    • Users can manage and delete their data through their dashboard
    • Deletion requests are processed in accordance with service functionality requirements
    • All data transfers are encrypted using industry standards
    • Service providers are bound by data processing agreements
    • Access to third-party services requires explicit user authorization
    • Users can revoke service access through their dashboard
    • Regular audits of data flows and processing practices

9. Cookies and Tracking

Cookies are small text files placed on your device by applications you visit. They are used to make applications work and improve their ease of use.

9.1 Types of Cookies We Use

  • Essential cookies that enable basic Platform functionality
  • Performance cookies that help us improve Platform performance
  • Functionality cookies that remember your preferences
  • Analytics cookies that help us understand how you use our services

9.2 Cookie Duration

In accordance with CNIL recommendations, cookies are stored for a maximum of 13 months. Your consent will be renewed after this period.

9.3 Cookie Control

You can control cookie settings through your browser preferences. However, disabling certain cookies may limit Platform functionality.

10. Your Rights

In accordance with applicable regulations, you have the following rights regarding your personal data:

  • Right to access your data
  • Right to rectify inaccurate data
  • Right to request data erasure
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time

11. Changes to Privacy Policy

Devtree reserves the right to modify and update this privacy policy at any time, particularly to account for any legal and/or jurisprudential developments and to meet the requirements of applicable personal data protection regulations.

The version that prevails is the one accessible online on the day of Platform consultation.

12. Contact Information and Data Protection Officer

For questions about this Privacy Policy or to exercise your rights, please contact us:

DEVTREE SAS

Email: hello@devtree.fr

Data Protection Inquiries: hello@devtree.fr

Address: 13 Bis avenue de la motte-picquet 75007 Paris, France

RCS Paris: 981202 583

Last Updated: June 23, 2025