Privacy Policy
Napoleon helps you describe how your business works so your AI assistant can work the way you do. That means you share business information with us. This page explains plainly what we collect, why, who processes it, and your rights.
Last updated: 10 October 2026
Who is responsible
The operator of Napoleon (see Imprint), contact: support@npln.ai.
What we collect and why
- Account data (name, email, sign-in method) to give you an account. Legal basis: contract (Art. 6(1)(b) GDPR).
- Business information you provide: interview answers, your website address and the text we read from it, documents you upload, your business map, chosen workflows and feedback. We use it only to build and improve your plugin. Legal basis: contract.
- Usage and AI request logs: which steps you used and the AI requests made for you (including the text sent to the AI), to calculate your plan's AI allowance, fix problems and prevent abuse. Legal basis: contract and legitimate interest (Art. 6(1)(f) GDPR).
- Payment data for paid plans, handled by Stripe. Legal basis: contract.
- Technical data (IP address, browser, error reports) to keep the service secure and working. Legal basis: legitimate interest.
Please do not upload sensitive personal data about others (for example health or patient data). Napoleon does not need it to map your business.
Your plugin
The plugin you download contains the business information from your map. It runs inside your own AI assistant (for example Claude or ChatGPT) under that provider's terms. The plugin itself sends nothing to Napoleon.
Who processes your data
We use these service providers, bound by data processing agreements. Some are based in the USA; transfers rely on the EU-U.S. Data Privacy Framework or standard contractual clauses.
- Clerk: Sign-in and account management (name, email, login method).
- Vercel: Hosting of the Napoleon website and app.
- Cloudflare: Our API, background jobs and file storage (uploaded documents and generated plugins).
- Neon: Database for your account, your business map, interview answers, workflows and usage records.
- Anthropic and/or OpenAI: AI processing of what you enter and upload, to run the interview and create your workflows and plugin. These providers do not use API data to train their models.
- Stripe: Payments and invoices for paid plans. We never see or store your card details.
- Sentry: Error reports from the app (technical details of what went wrong; no recordings of your screen).
How long we keep it
We keep your account and business data while your account exists. Deleting a business removes it from your account; contact us to have all your data, including logs and uploaded documents, erased. Payment records are kept as long as tax law requires.
Cookies
We only use cookies that are needed to keep you signed in and the service secure. We do not use advertising or tracking cookies.
Your rights
You can ask for access to, correction, deletion, restriction or a copy of your data, and object to processing based on legitimate interest. Write to support@npln.ai. You also have the right to complain to a data protection authority.