Security and responsible disclosure

The security of your data underpins the trust you place in us. If you find a flaw, we want to hear about it before anyone else does.

Report a vulnerability

Our commitment

• Acknowledgement within 72 business hours.
• You are kept informed until the issue is fixed.
• No legal action against good-faith research that follows this policy.
• Public credit if you would like it.

Scope

In scope: the paisible.ai website and its subdomains, plus the Paisible AI iPhone, iPad and Android apps.

Out of scope: volumetric denial of service, social engineering, spam, and reports produced solely by an automated scanner with no demonstrated impact.

Ground rules

• Never access, modify or delete another user data.
• Do not disrupt the service or degrade its operation.
• Wait for our fix before any public disclosure.

How we protect your data every day

Paisible AI is designed in France and hosts your data in Europe, in compliance with GDPR. Connections to your social networks use the official authorisation protocols: we never store your Facebook, Instagram, LinkedIn, Google, X, TikTok or YouTube passwords. Payments are processed by Stripe; no card data ever passes through our servers.

You stay in control: every network can be disconnected at any time, and your account can be exported or deleted from your workspace. Exchanges with AI models are limited to what is strictly necessary to produce your content and are not used to train third-party models.

A question about security, privacy or compliance? Write to info@paisible.ai — we reply within 72 business hours.

What we do on our side

• Daily encrypted backup, with restoration actually tested.
• Continuous monitoring of vulnerabilities in our software dependencies.
• Encryption of traffic and of stored credentials.
• Two-factor authentication available on every account.

RFC 9116 : /.well-known/security.txt