Legal Notice and Privacy

Legal notice and privacy policy for the Komposia website

Last updated: April 2026

Legal Notice

Site Publisher

This site is published personally by:

Julien Moulis

Based in Arenthon, France

Email: contact@komposia.ai

Komposia is currently in a public beta phase and made available free of charge. The pricing page shown is indicative: it lets users express which plan they would be willing to subscribe to once this phase ends. No billing is carried out during the beta.

Hosting

The site and its services are hosted by:

Vercel Inc.

340 Pine Street, Suite 701, San Francisco, CA 94104, United States

https://vercel.com

Infrastructure deployed in the Europe region

Railway Technologies Inc.

340 Pine Street, Suite 701, San Francisco, CA 94104, United States

https://railway.app

Infrastructure deployed in the Europe region

Data is stored via:

MongoDB, Inc.

1633 Broadway, 38th Floor, New York, NY 10019, United States

https://www.mongodb.com

MongoDB Atlas cluster deployed in the Europe region

Intellectual Property

All content on this site (text, visuals, logo, platform code) is the exclusive property of the publisher. Any reproduction, representation or distribution, in whole or in part, without express authorization is prohibited.

Privacy Policy

1. Data Controller

Julien Moulis

Arenthon, France

Email: contact@komposia.ai

2. Data Collected

When creating and using a Komposia account, the following data is collected:

Email address
Password (stored in hashed form, never in clear text)
Professional information provided at signup (company name or developer profile)

This data is collected on the basis of your consent and is necessary for the operation of the service.

Integration Keys and Environment Variables

As part of using the platform, users can configure third-party API keys and environment variables required for their integrations.

These data are:

Encrypted and managed exclusively server-side via Google Cloud Key Management Service (KMS)
Never exposed client-side (front-end)
Never transmitted to third parties other than the service targeted by the integration in question

Google Cloud KMS is operated by Google LLC.

Key storage region: eur3 (Belgium, EU)

https://cloud.google.com/security-key-management

3. Purposes of Processing

Data is used exclusively for:

Creating and managing your user account
Authentication to the platform
Providing the Komposia service

No data is sold, transferred or communicated to third parties for commercial purposes.

4. Retention Period

Data is retained for the entire duration of your account activity. In the event of account deletion, data is erased within 30 days.

5. Data Hosting

Data is hosted on infrastructure located in Europe:

Vercel: Europe region (Paris / Frankfurt)
Railway: Europe region
MongoDB Atlas: Europe cluster (EU region)

No data transfer outside the European Economic Area is carried out.

6. Your Rights

In accordance with the GDPR, you have the following rights:

Right of access to your data
Right of rectification
Right to erasure ("right to be forgotten")
Right to portability
Right to object to processing

To exercise these rights, contact: contact@komposia.ai

You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

7. Cookies

Komposia uses only technical cookies, strictly necessary for the operation of the service:

Authentication cookies : user session maintenance
Internal configuration cookies (e.g. websiteSlug, runtimeEnv): memorization of the navigation context in the application

These cookies do not collect any data for analytical or advertising purposes. No third-party cookies are placed.

In accordance with CNIL regulations, as these cookies are strictly necessary for the service, they do not require prior consent collection. No consent banner is therefore displayed.