This agreement applies to every DigiSeer plan and forms part of the terms of service, in accordance with Article 28 of the GDPR.
Parties and roles
The customer is the controller. DigiStella is the processor.
Subject and duration
Processing needed to provide DigiSeer — indexing the customer’s content and answering visitors’ questions — for the duration of the subscription.
Data and people concerned
Content published by the customer; questions typed by visitors, which may incidentally contain personal data. Customer account data is not covered: for it, DigiStella is the controller (see Privacy).
Processor obligations
- Process data only on documented instructions
- Confidentiality of authorised staff
- Security measures described on the Security page
- Use only the sub-processors listed on this site, informing the customer of any addition or change 30 days in advance
- Assist the customer with data subject requests and impact assessments
- Notify personal data breaches without undue delay, and within 48 hours
- Delete or return data at the end of the contract, within 30 days
- Make information available for audits
- Never use the customer’s or its visitors’ data to train AI models
- Never sell, rent or hand over the customer’s or its visitors’ data, and never use it for any purpose other than the service: no search engine ranking, no own content, no advertising, no answers to visitors of other sites
- Access this data only at the customer’s request (support) or to ensure the security of the service
- Protect visitor data: IP addresses replaced by an encrypted fingerprint and deleted after 13 months, e-mail addresses and numbers masked in stored questions, no cookies and no visitor profiles
Location
Data processed on the customer’s behalf is hosted in France and processed in the European Union, including by Mistral AI’s model, called through its European endpoint. No transfer outside the European Union. Sub-processors are listed on the Sub-processors page.
Last updated: 6 November 2026.