Privacy Policy

Last updated: May 4, 2026

Introduction

talk.clementmilton.com (“the Service”) is operated by Flouvou LLC (“we”, “us”, “our”). This Privacy Policy explains what data we collect, why we collect it, and how we protect it.

By using the Service, you consent to this policy. If you don’t agree with anything here, please don’t use the Service.

Data we collect

When you use the Service, we collect:

Account data

  • Email address (only if you choose to create an account via magic link)

Conversation data

  • Messages you send to the Clement Milton AI
  • AI responses
  • Session metadata (timestamps, duration, billing status)

Memory data (only for authenticated users)

  • Structured information extracted from your conversations: names you mention, situational context, frameworks discussed
  • Summaries of past sessions

Payment data

Payment is processed by Stripe. We do NOT store your full card number. We store: Stripe Customer ID, last 4 digits of card, expiry, billing zip. Receipts are sent to your email by Stripe directly.

Technical data

  • IP address (hashed, not stored in plain text)
  • Browser fingerprint (used for anti-abuse, not for tracking)
  • Device characteristics (user agent, screen, timezone)
  • Session cookies (for authentication)

Why we collect this data

  • To provide the Service: process your conversations, remember context, charge for usage
  • To prevent abuse: detect repeat trial attempts, prevent fraud
  • To improve the Service: aggregate, anonymized analytics
  • For legal compliance: tax records, dispute resolution

Who we share data with

We share data ONLY with:

  • Anthropic (Claude AI provider) — to generate AI responses. Anthropic does not train on your data per their API terms.
  • Stripe — to process payments
  • Supabase — to store your account and conversations
  • Resend — to send transactional emails
  • FingerprintJS — to verify trial eligibility
  • Sentry — to monitor errors (sensitive data redacted)

We do NOT sell your data. We do NOT use it for marketing to third parties.

Data security

  • All data is encrypted in transit (HTTPS) and at rest
  • Access to production data is restricted to operators
  • Payment data is handled exclusively by Stripe (PCI DSS compliant)
  • We never share full conversation content with anyone except as required to deliver the Service

Your rights (GDPR, CCPA, etc.)

You have the right to:

  • Access — request a copy of your data
  • Delete — use the “Forget me” feature in the chat (deletes conversations, memory, account)
  • Correct — update your information
  • Object — opt out of email reminders via unsubscribe link
  • Portability — request export of your data
  • Withdraw consent — stop using the Service

For any of these, email: clement@clementmilton.com

Children's privacy

The Service is not intended for users under 18. We do not knowingly collect data from minors. If you are under 18, please do not use the Service.

Cookies

We use cookies for:

  • Authentication (httpOnly, secure)
  • Anti-abuse (fingerprinting)
  • Session management
  • Promo banner state

We do NOT use third-party tracking cookies. We do NOT use advertising cookies.

You can review and manage your cookie preferences via the cookie banner.

Data retention

  • Active account data: kept while you use the Service
  • Inactive account data: kept for 12 months after last activity, then offered for deletion
  • Payment records: kept 7 years for tax compliance
  • Aggregated, anonymized analytics: kept indefinitely

International data transfers

Data may be processed in the US (Stripe, Resend, Sentry) and in regions where Supabase operates. By using the Service, you consent to these transfers.

Changes to this policy

We may update this policy. Significant changes will be notified via email or in-app notice. Last updated date at the top of this page reflects the most recent change.

Contact

For privacy questions: