YOUR DATA
Privacy policy
Last updated: 13 October 2026. Version française
This English version is provided for convenience. In case of discrepancy, the French version prevails.
This page describes the processing related to the Tamiro website and to its application for marketing strategy, content creation, publishing and analytics.
1. Data controller
Tamiro is published by Laurent Vergnaud EI, sole proprietor, SIREN 502 554 439, 229 rue Saint-Honoré, 75001 Paris, France. For any question about your personal data: contact@tamiro.ai.
2. Data used by the application
Tamiro uses the account and project information, the marketing context, the content and the publishing settings you provide to carry out the operations you request. Connected features access the services you authorize.
Managing your account and providing the features you request rely on the performance of the service. Account protection, abuse prevention and security logs rely on Tamiro’s legitimate interest in securing its service. Data strictly necessary to a legal obligation is processed on the basis of that obligation. When a processing relies on your consent, you can withdraw it at any time.
3. Google connections
The Google connection is optional and requires your authorization. Without it, the analyses that use Google Search Console and Google Analytics are not available. When you authorize it, Tamiro can access the following data:
- Account identity: your Google identifier, name, email address and profile picture, to identify the connected account.
- Google Search Console: the list of the sites you can access, then the data of the selected site, including queries, pages, clicks, impressions, positions and indexing information. They are used to analyze visibility and to follow published content.
- Google Analytics 4: the list of the accounts and properties you can access, then the reports of the selected property, including traffic, engagement and page performance. They are used to analyze your website’s results.
The Analytics and Search Console authorizations are read-only (analytics.readonly and webmasters.readonly). They do not allow Tamiro to change your Google settings. You select the resources linked to your project in the application.
4. Analyses and artificial intelligence
Connected data can feed your project’s analyses and the assistant’s answers when you use these features. The results of these tools can then be sent to the artificial intelligence service that produces the answer.
Depending on the features and models used, Tamiro relies on the following providers:
- OpenAI, Anthropic and xAI (Grok) for assistance, analysis and content generation features. The instructions, context and content provided to these features can be sent to the provider used. Results of the Google tools can in particular be sent to OpenAI when the assistant uses them to answer your request.
- Magnific (an integration named “Magnifik” in Tamiro) for image generation, from the instructions and, depending on the feature used, the reference images provided.
- Cloudflare for Tamiro’s assistant: its conversations, which can contain Google Analytics and Search Console results, are stored by Cloudflare in the European Union. Calls to artificial intelligence models go through Cloudflare’s gateway (AI Gateway), which forwards them to the model’s provider, and some models are run directly by Cloudflare (Workers AI).
Your own AI assistant. If you connect your own AI assistant, such as Claude or ChatGPT, to Tamiro’s MCP server, you choose the families of data it may access, including Google Search Console and Google Analytics. Tamiro then sends this data to that assistant when it asks, on your behalf. Its processing by that assistant is governed by the terms of its publisher. You can withdraw this access at any time in your Tamiro profile, under “Agent connections”.
Relying on several providers does not mean that every request or piece of data is sent to all of them. The provider used receives the information needed by the feature requested. The processing performed by these services is described in their data protection documents: OpenAI, Anthropic, xAI, Magnific and Cloudflare. The periods below concern the data kept by Tamiro; the providers may apply their own periods to the data they process, in particular for the security of their services.
5. Hosting, storage and retention
The Tamiro application is hosted on Render, in the Frankfurt region, Germany. Its database is hosted on Supabase, in the AWS Europe (Paris) region, France (eu-west-3). Tamiro’s assistant runs on Cloudflare, its conversations being stored in the European Union, and the website is hosted on Cloudflare. These providers take part in delivering and running the service.
Google access tokens are encrypted before being stored in the database. The selected resources are linked to your project. Some analysis results are kept in the application’s reports, caches or histories.
Project data is kept while you use the service. It is deleted from the active database within 30 days after the account is closed or after a valid deletion request, unless a specific legal obligation justifies keeping some of it. This exception only covers the data needed for that obligation and for its applicable period.
The following maximum retention periods apply to Tamiro’s backups and logs:
- Backups: three months after each backup is created.
- Technical logs: 30 days after each event is recorded.
- Security traces: 12 months after each event is recorded, for the traceability of access and actions and the investigation of security incidents. This period does not extend the retention of the content, instructions or results that may appear in the technical logs.
These periods are maximums: they do not mean keeping data that is no longer needed to provide or secure the service. An account’s inactivity alone does not justify unlimited retention.
Hosting the application and its database mainly in the European Union does not mean that all the processing of the providers, in particular of the AI services, stays in that area. Their data protection documents describe the international transfers and the mechanisms that govern them, including the European Commission’s standard contractual clauses where they apply. You can contact us at contact@tamiro.ai for information on the safeguards that apply to the processing of your data.
6. Disconnection and deletion
You can disconnect Google in your project’s settings. This deletes the connection credentials and the project’s resource selection. It does not automatically delete the reports and histories already recorded.
You can also withdraw Tamiro’s authorization from the connections page of your Google Account. To request the deletion of data already recorded, write to contact@tamiro.ai. The data concerned is deleted from the active database within the 30-day period stated above. Residual copies may remain in backups until they expire, at the latest three months after each backup is created. This period is separate from the deletion period of the active database.
7. Visiting the website
This version of the website contains no tracking script and no form. The fonts are hosted with the site. The host may process the technical information needed to deliver the pages and secure them.
To show the French version to browsers set to French, a script reads, in your browser, its preferred language and the page you come from; this information is neither sent nor stored. When you choose a language with the site’s language links, the choice is saved in a cookie, tamiro_lang, kept for 13 months and used only to show you the chosen language. It is the site’s only cookie; it personalizes the display at your request and therefore does not require your consent. You can delete it at any time in your browser’s settings.
8. Limited use of Google data
Tamiro commits to complying with the Google API Services User Data Policy, including the Limited Use requirements. The data obtained through Google APIs is used for the analysis and assistance features described in this policy, including its transfer, at your request, to the AI assistant you connect to Tamiro’s MCP server.
Tamiro commits not to sell this data, not to use it for advertising, and not to use or transfer it to train general-purpose artificial intelligence models. Its transfer to a provider is limited to the needs of the authorized features, the security of the service or the applicable legal obligations. Human access to this data is limited to the cases that Google policy allows, in particular with your agreement for support, for security purposes or to comply with a legal obligation.
9. Your rights and how to contact us
Under the conditions set by the regulations, you can ask to access your data, correct it, erase it, restrict its processing or receive it in a portable format, and you can object to processing based on legitimate interest. When processing relies on your consent, withdrawing it does not affect the lawfulness of the processing already carried out.
Send your request to contact@tamiro.ai, stating the account or project concerned. A proportionate identity check may be needed in case of reasonable doubt. We answer within one month; an extension provided for by the regulations may be needed depending on the complexity or number of requests, in which case we inform you within that first month. This response time is separate from the retention periods stated above.
You can also lodge a complaint with the CNIL, the French data protection authority.
10. Changes to this policy
This policy may change with the service. The date at the top of this page shows its last update. A change in the use of Google data that requires a new authorization is presented to you before the new use is implemented.