Privacy Policy
Last updated: 17 May 2026
1. Data controller
Mammouth AI is operated from Nice, France. For any privacy request you can reach our Data Protection contact at privacy@mammouth-ai.com.
2. Data we collect
- Identification data you provide via our contact form (name, email, company, message).
- Operational data exchanged with our AI agents when you sign up (WhatsApp number, business context, files you share).
- Connection logs (IP, user agent, timestamps) for security and abuse prevention.
- Anonymous traffic analytics. We do not use advertising cookies or cross-site trackers.
3. Legal basis (GDPR Art. 6)
We process your data on the basis of (a) your explicit consent when you submit a form, (b) the performance of the contract when you use the service, and (c) our legitimate interest in keeping the platform secure.
4. Retention
Contact-form data is kept for up to 24 months after our last exchange. Operational data is retained for the duration of your subscription and 12 months thereafter, then deleted or anonymised.
5. Sub-processors
We rely on a short list of GDPR-compliant providers (EU-hosted infrastructure, transactional email, WhatsApp Business API, model providers under DPA). The full list is available on request.
6. International transfers
When data leaves the European Economic Area, transfers are covered by the European Commission's Standard Contractual Clauses and additional safeguards where required.
7. Your rights
Under GDPR you have a right to access, rectify, erase, restrict, port and object to processing of your data, and to lodge a complaint with the CNIL (cnil.fr). Email privacy@mammouth-ai.com and we answer within 30 days.
8. Cookies
Mammouth AI uses only strictly necessary cookies. No tracking, advertising or profiling cookies are set without your prior consent.