What we do with your documents

1. 1You submit a fileIt is sent to our server and read in memory. It is written neither to disk nor to a database — you can verify this: no file write exists in the extraction code.
2. 2We extract the textSlides, paragraphs, headings, and the figures from your slides — images under 10 kB, logos and bullets, are set aside. That text goes to Claude, to write the outline and the script. A spreadsheet also sends CELL VALUES: the columns retained, their figures, and the statistics computed before sending — never the whole sheet. Your figures go to no one: we display them as they are.
3. 3We build the capsuleTiming, colours, animations and diagrams are computed by our code, not by the model. The capsule is saved so you have a page to come back to.
4. 4Your file disappearsOnce the text is extracted, the file no longer exists anywhere. Only its name remains, as an internal reference, along with the figures the outline selected for your capsule. Both are erased with it.

• DataThe file you submit
  What we do with itRead in memory to extract its text
  How longNever kept
• DataThe file name
  What we do with itInternal reference, tied to the capsule. Never displayed or published.
  How longWith the capsule
• DataThe capsule produced
  What we do with itSaved so your link keeps working
  How long7 days
• DataThe text extracted from a document split into a series
  What we do with itKept with the series so that the following parts can be generated without submitting the file again. The file itself is never kept. A “Delete this document” button sits on the series page, with immediate effect.
  How long7 days (without an account), or until you delete it
• DataThe figures taken from your document
  What we do with itThe diagrams from your slides, displayed as they are rather than remade. They serve only this capsule, are never pooled with any other, and are sent to no third-party service.
  How longDeleted with the capsule
• DataAn illustration produced for your capsule
  What we do with itKept in cache so we don’t make it twice. It is tied neither to you nor to your document — only to the description that produced it.
  How longNo limit — see below
• DataThe technical log
  What we do with itCost and duration of each call, plus a few reference points taken from the capsule (title, key terms) to verify its fidelity to the document
  How longDeleted with the capsule
• DataYour answers to the interactive pauses
  What we do with itWhat you answered, your variant and your steps, for marking
  How long7 days (without an account)
• DataAn anti-abuse counter
  What we do with itA fingerprint of your connection, to limit generations. We do not keep your address in clear text.
  How longAs long as the server is running
• DataYour language choice
  What we do with itA cookie that remembers the language you picked, so the next page is already in it. It holds nothing but the language code — “fr”, “ar” — and nothing that identifies you. The language offered at the outset comes from your browser, never from your location.
  How longOne year, or until you clear your cookies
• DataThe waiting-list email address
  What we do with itTo let you know when accounts open and pilot trials begin — nothing else. Every email contains an opt-out link that works on the first click.
  How longUntil you opt out, or until launch
• DataYour email address and your password
  What we do with itTo sign you in. The address is with us; the password is with Supabase Auth, as a fingerprint — we keep no copy of it.
  How longUntil the account is deleted
• DataYour phone number
  What we do with itOptional, never asked at sign-up: offered afterwards, so we can reach you if a capsule goes wrong. No text message is ever sent, and the number is displayed nowhere.
  How longUntil the account is deleted

• ServiceSupabase (database and credentials)
  What it’s forStores your capsules and, since accounts opened, your email address and the fingerprint of your password. The password itself is never readable, by us or by anyone: only its fingerprint is kept.
  WhereUnited States (Canadian region planned)
• ServiceAnthropic (Claude)
  What it’s forWrites the capsule’s outline and narration, from the extracted text
  WhereUnited States
• ServiceOpenAI (gpt-image)
  What it’s forProduces an illustration when the outline asks for one — two at most, often none
  WhereUnited States
• ServiceElevenLabs
  What it’s forWill narrate the capsules. Not yet active: capsules are currently subtitled, without voice.
  WhereNot active
• ServiceZ.AI (series splitting)
  What it’s forSuggests how to split a long document into several capsules. It receives your chapter TITLES, never the whole document. A free model, chosen for this task alone.
  WhereChina
• ServiceOpenRouter (model router)
  What it’s forRoutes part of the writing, narration and illustration calls to other providers. It therefore receives the text extracted from your document and the narrated text.
  WhereUnited States
• ServiceResend
  What it’s forSends account emails: sign-in link, address confirmation, new password, and the waiting-list confirmation. Your address serves no other purpose for them.
  WhereUnited States
• ServiceMeta (Facebook pixel)
  What it’s forMeasures how well our ads work. Receives the pages you visit on this site — never your documents or your capsules. Does not load if your browser signals “do not track”.
  WhereUnited States

These services process the text extracted from your document to produce the capsule, and nothing else. None of them trains a model on your data — it is a condition of their business plans, and a non-negotiable principle on our side.

These providers do, however, temporarily retain what is sent to them, for abuse monitoring — on the order of a month under their terms. We have not yet signed an agreement that removes this retention, and we do not claim otherwise.

Acavisio is designed to be hosted in Canada, so as to fall under Law 25. It is an architectural decision made from the start, and it constrains our choice of host and database.

As of today, that hosting is not yet in place: the product is under construction and runs on its author’s computer. The generation services we call are, for their part, in the United States — it is written in the table above. We would rather tell you than let you find out.

It is displayed on every capsule and cannot be removed — not by you, not by us, not in the paid plan. A student must always know that a capsule was made with the help of an AI. It is a design constraint, built into the player itself.

A capsule created without an account is deleted after seven days: its link stops working, and the capsule itself is erased from our database — along with the technical log that accompanied it, the figures taken from your document and your answers to the interactive pauses. You have nothing to do.

An account is deleted by writing to the address below: we then erase its capsules, its series and its profile, along with the credential kept at Supabase Auth. It is not yet a button in the account screen, and we prefer to say so rather than promise a gesture that does not exist.

Acavisio’s personal information protection officer is Jérémie Albert, founder — Law 25 assigns this role by default to the person with the highest authority in the company, and we designate him explicitly.

For any question about your personal information — access, correction, deletion, or simple curiosity — write to him directly:

confidentialite@acavisio.com