Your space, your data.
Who is responsible?
Merwan Korkmaz contact@aneyna.com
Context shared with your AI
After your permission, ChatGPT or Claude can read the text selected in Settings and propose additions. Other workspace data is unavailable to this connector. Authorized client identifiers and proposals are kept in your account; only you can approve proposals, which expire after three days. Disconnecting blocks new access. Data already sent remains subject to your provider’s rules; clearing context here does not erase their copy.
What Aneyna uses
Your first name personalises your space; your email and password manage your account. Supabase Auth stores a password hash. Tasks, projects, appointments, notes, documents, CV, applications, letters, expenses, subscriptions, habits, meals, activities, bookmarks and follow-up drafts support the features you request. Preferences tailor resources. Tickets retain your messages and support replies. Aneyna does not collect personal AI provider API keys.
Purposes and grounds
Managing your account and requested features is necessary to provide the service. Access controls and abuse counters protect the service and its users. Optional analytics depends on your consent; declining does not block your space. You can withdraw analytics consent at any time in cookie preferences.
Hosting and recipients
The project uses Supabase for accounts, data and private files; its database is configured in Frankfurt. The website is hosted by Vercel, with server functions configured in Frankfurt and public files delivered over its global network. Supabase stores temporary abuse counters with hashed identifiers (Upstash is an optional alternative), and Cloudflare Turnstile protects forms when enabled. Resend sends account emails from its Ireland region. Cloudflare protects forms and forwards contact messages to the publisher’s Google mailbox. These international providers may process data outside the European Union under their processing agreements and transfer safeguards. Invited members see only shared lists, according to their read or edit permissions.
Gmail and follow-ups
Gmail is optional and must be enabled by the team. Google requests consent for your identity and sending messages; Aneyna does not request inbox access. OAuth tokens are encrypted on the server, separate from browser-accessible data. Every message must be reviewed and explicitly approved before immediate or scheduled sending. The recipient receives the approved message. Disconnecting Gmail revokes access and cancels scheduled follow-ups; it does not recall delivered emails.
Search, news and browser
Himalayas search sends the job title and country France, without the CV. France Travail search sends your target role, department and contract type, not your full CV. Relevance is computed by the Aneyna server from your skills. Job results are cached for six hours and removed during a later search once older than 24 hours. UN News, France 24 and RFI are fetched by language and topic without sharing your profile. Opening a site in the embedded browser shares ordinary connection information, including your IP address. Your selected context is not sent automatically. Copying context lets you share it yourself with a recipient you choose.
Assistant and demo
When available and authorized in your ChatGPT or Claude account, the connector shares only the context you select. The provider uses this text to respond in its service under its terms and your account settings. Aneyna stores the context and received proposals; each addition requires your approval. Clear the context and revoke access in Settings. Previously shared context cannot be recalled. Aneyna never requests a personal API key. Local letter drafts are composed from your words without AI. The demo uses examples and local replies in this browser; resetting it removes those records. Conversations are not stored in the Aneyna database in this version.
Retention and your rights
Data remains available until you delete it or your account. In Settings you can edit records, export structured data, download documents separately and request account deletion. Active data is erased; residual backup retention depends on the hosting contract. This version does not automatically delete inactive accounts. Technical logs follow the retention periods of the active hosting plans; contact the publisher for details. Contact the publisher to exercise applicable access, correction, deletion, restriction, objection or portability rights. You may complain to the CNIL.
Cookies and analytics
Essential storage supports your session and preferences. Analytics starts only after consent. It increments a daily public-page counter in Supabase, retained for 90 days, without visitor identifiers or URL parameters. In production, Vercel Speed Insights also measures public-page loading, responsiveness and visual stability, with technical information (browser, device, connection and country). URL parameters and fragments are removed. Private, demo and sign-in pages are excluded from sent events. No note, CV, budget or conversation content is collected for analytics. Change your choice using the button below.