What is stored, and where
- Accounts, conversations, files, memory and routines: on the Pichu platform, on servers in France. Sensitive data is encrypted in the database.
- Your Bots’ computer (browser, sessions, working files): on our servers in France with the managed cloud, or on your own server once self-hosting is available.
- Access to your mail and calendars: authorization tokens encrypted on the platform, which you can revoke at any time with Google or Microsoft.
- Vault: credentials encrypted, never sent back into the conversation.
Who receives what
- The AI model provider, DeepSeek by default (China): the request and the context needed for the task in progress, each time a Bot works.
- Mistral AI (France, EU), as an option with your own key: the same, and then every step of the Bot goes through Mistral, safety review included.
- OpenAI (United States): only if you use image creation or voice features, or set a Bot to a GPT model.
- Google or Microsoft: the calls needed to read and prepare your mail and calendar, once you have connected your account.
- Apple or Google: a notification identifier for your phone, used when a Bot needs you.
Keeping everything in France and the EU
Use the managed cloud or your own server in France, Mistral with your own key, and don’t use image creation, voice or GPT models.
Deleting your data
On request, YatoFix deletes your account, Bots, conversations, files, memory, connections and backups, and removes your Bots’ computer.
What we don’t do
YatoFix doesn’t sell or hand over your data and doesn’t use it to train models. The AI model provider you use processes requests under its own terms.