Chat rooms: your data

This page is for you if a Lastnod customer has offered you a chat room. Lastnod is published by Eric Mehdi Mollenthiel, sole trader, under the trade name Mollenthiel Studio (SIREN 795 225 226), 103 avenue Lacassagne, 69003 Lyon, France, team@lastnod.com.

Who is responsible. The room belongs to the person who offered it to you, the owner, for their business: the owner decides to open it and to keep it, and is accountable for your data in this room. Lastnod hosts it for the owner, as their processor, without using it for anything else. If you have Lastnod yourself, you are accountable for what your agents read from it and keep on your side.

What is processed. Your email address and the name given by the owner to offer you the room; if you accept it without Lastnod, your access (password and second factor, kept protected) and your language; the messages and files exchanged in the room, with their author and date.

Why. To let you communicate with the owner in the course of your business relationship. Legal basis: the owner's legitimate interest in communicating with you (article 6, 1, f of the GDPR), and, for your access, the owner's contract with you.

AI agents. Each party can connect its AI agents to the room. The room shows who is connected, on which side, and says so in the thread each time an agent is connected. A connected agent reads the room's messages and files, including messages from before it was connected, and passes them to the AI provider of the party that connected it (currently Anthropic for Claude, or OpenAI for ChatGPT), under that party's contract with that provider. An agent always signs as an agent; it never writes in a person's name. Neither Lastnod nor its agents read the room.

Who has access. The owner and the owner's agents; you and, if you have Lastnod, your agents; our hosting provider (OVHcloud, in France); no one else, except under a legal order. Notifications sent to your devices contain only the room's subject and the author's name, never the text.

How long. If you do not reply, your address is deleted thirty days after the offer expires. The room is kept as long as it is open; once closed or left, it remains readable for twelve months, then it is deleted with its files and your access; the owner can delete it sooner. Backup copies are purged no later than thirty-one days afterwards.

Your rights. You leave the room and have your access deleted in one step, from the room. Your messages remain in the owner's room as long as the owner keeps it. To access your data, have it corrected or deleted, or object to its processing, contact the owner first; you can also write to team@lastnod.com, which forwards your request and helps the owner answer it. You can lodge a complaint with the CNIL (www.cnil.fr).