Trust
How AirPlate AI handles your venue's data
Where the data is hosted, which providers process it, how the AI assistant uses it, and the security measures written into the data processing agreement.
GDPR
Who is responsible for what
Under the GDPR, your venue is the controller of the personal data it handles in AirPlate AI, such as your clients' and your team's details. Airplate, the company behind AirPlate AI, is the processor: it processes that data only on your venue's instructions.
The data processing agreement
It sets out those instructions and the Article 28 terms: what is processed and why, confidentiality, sub-processors, help with requests from data subjects, breach notices, deletion or return at the end of the service, and audits.
Read the data processing agreementMeasures, as they are
Airplate holds no security or privacy certification. This page states what the service does today, in the words of the data processing agreement, the sub-processor page and the privacy policy.
Hosting
Where the data is hosted
As the data processing agreement and the sub-processor page state it.
Application, database and file storage
DigitalOcean, in Frankfurt, Germany (EU).
Where your venue's account, its bookings and its uploaded files are kept.
Electronic signatures
Documenso, operated by Airplate, at Hetzner in Helsinki, Finland (EU).
Contracts sent for signature, the signers' names and e-mail addresses, and the signing audit trail.
Documentation search
Pinecone, in the United States.
It receives the text of each chat message, with e-mail addresses, phone numbers, IBANs and card numbers replaced by placeholders, to search the product documentation. Only that documentation is stored there.
Not every provider is in the EU: the sub-processor page lists each one, where it processes data and the transfer mechanism that applies. Telegram is optional: only a venue that connects the bot sends data to it, and Telegram is outside the EU.
AI provider
Mistral AI, on its EU endpoint
The AI assistant, the support chat, the translation of e-mail templates and the Telegram bot's reading of messages and voice notes run on Mistral AI, a French company.
- Airplate uses Mistral's EU endpoint, so this processing takes place in the EU.
- Mistral applies zero data retention to Airplate's requests: inputs and outputs are not stored beyond generating the answer.
- Before any text leaves Airplate, e-mail addresses, phone numbers, bank account numbers (IBAN) and card numbers are replaced with placeholders.
AI policy
What the AI does with your data
No training on your data
Airplate has switched off the use of its data to train Mistral's models.
A person confirms
The AI assistant never sends on its own: every outgoing action it prepares waits for a person to confirm it. Automatic contract sending is a venue setting, off by default.
Answers from your account
In the app, the assistant answers about your requests and their status, your event spaces, your packages and your plan, from your own account.
Annex 1 of the DPA
Technical and organisational measures
The measures Annex 1 of the data processing agreement lists, word for word.
- Location: the Airplate application, its database and its file storage run at DigitalOcean in Frankfurt, Germany (EU); the electronic-signature service runs at Hetzner in Helsinki, Finland (EU).
- Encryption in transit: airplate.ai and its API are reached over HTTPS only, through Cloudflare.
- Stored credentials: the tokens and keys of a venue's connected integrations are stored encrypted (AES-256-GCM).
- Passwords: kept only as salted bcrypt hashes.
- Access control: every request to a venue's data needs a valid, expiring session; every database query is limited to the venue's own account; team members act within the venue's roles; a password change or reset ends every existing session.
- Administrative access: Airplate's administration area needs a second factor.
- Abuse protection: sign-in, password reset, the public request forms and the other public endpoints are rate-limited per connection.
- Language model: e-mail addresses, phone numbers, IBANs and card numbers are replaced with placeholders before text reaches the model; the model is reached through Mistral's EU endpoint; the use of Airplate's data to train Mistral's models is switched off.
- Payments: card details are entered only on Stripe's pages, never on Airplate.
- Logs: webhook requests are logged as method, masked path and status, without their headers.
- Backups: the managed database is backed up by the hosting provider; deleted personal data leaves those backups within seven days.
- Retention: as stated under "How long we keep data" in the privacy policy, for example proposal-view IP addresses are erased after thirty days.
- People: everyone authorised to process the personal data is bound to confidentiality (section 5); breaches are handled under section 10.
Breaches and deletion
Breach notices, deletion and your rights
Breach notice
Airplate notifies the venue without undue delay after becoming aware of a personal data breach affecting the venue's personal data, and aims to do so within forty-eight hours.
At the end of the service
When the service ends, Airplate, at the venue's choice, returns the personal data to the venue or deletes it, and deletes the remaining copies within one month, unless EU or member-state law requires it to keep them.
Privacy requests
Ask for a copy of your personal data, its correction or its deletion on the privacy request page. How long each kind of data is kept is in the privacy policy.
Documents
Read the documents
- Data processing agreementThe Article 28 terms and Annex 1, the measures.
- Sub-processorsEach provider, what it receives, where, and the transfer mechanism.
- Privacy policyWhat is collected, who receives it and how long it is kept.
- Privacy requestAsk for a copy of your personal data, its correction or its deletion.