Privacy policy
Last updated: October 26, 2026
This page explains what personal data Inspired One (inspired.one) processes, why, with whom, for how long, and how to exercise your rights.
1. Who is responsible for your data?
NICOCONUT, SAS, 99 avenue de la République, 75011 Paris, France (RCS Paris 837 661 156), publisher of Inspired One. For any question or request: nicoconut@nicoconut.com.
2. The essentials
- You sign in with Google only. We receive your name, your email address and, where applicable, the address of your profile picture.
- Your texts are private unless you choose to publish them.
- We do not send your texts to any AI provider, unless you yourself turn on the immediate AI reply in your Settings (off by default): the text you comment on (and its versions), its threads, its arcs, its brief and its references (links, file names, comments and excerpts of attached documents) are then sent to OpenAI to generate the reply — the full text once per version, to summarize it. Otherwise, your own AI, which you connect and authorize, is what accesses them.
- The messages you write in the online help (the chat at the bottom right) are sent to OpenAI to generate the reply, and read by the operator.
- The operator can read your texts, read-only, for support, moderation and security. It never modifies them.
- Product analytics (PostHog) are hosted in the European Union. They set a first-party cookie to recognize a visitor from one visit to the next, without session recording and without the content of your texts.
- YouTube videos: when a text contains a YouTube video, its thumbnail is loaded from YouTube (Google), which then receives your IP address; the video itself only loads when you click it, in "privacy-enhanced mode" (youtube-nocookie.com), and YouTube's own privacy policy then applies.
- No advertising cookies.
3. Data processed, purposes and legal bases
| Data | Why | Legal basis |
|---|---|---|
| Account: name, email address, profile picture address (sent by Google) | Create your account, identify you, sign you in | Performance of the contract (Terms) |
| Workshop: your texts and all their versions, statements of intent and style notes, thematic arcs, references (links, notes, uploaded PDFs), workshop comment threads | Provide the writing workshop | Performance of the contract |
| Reading and preferences: reading progress, display and language preferences, favorites | Resume your reading, keep your settings | Performance of the contract |
| Publishing: public handle (and previous handles), published copies of your texts, share image | Display publicly what you choose to publish | Performance of the contract |
| Reader comments: comment text, quoted passage, public name, account email (never displayed), reports, blocked readers | Enable discussion under a published text, moderate it, fight abuse | Performance of the contract; legitimate interest (service safety); legal obligation (handling reports) |
| Emails: notification preferences, log of notifications sent to the author | Tell you about a reply, a comment or a report (at most 5 emails per day, then a daily digest) | Performance of the contract |
| Connected AIs: authorization tokens (OAuth) of the AIs you connected | Let your AI access your texts, with your authorization | Performance of the contract |
| Immediate AI reply (if you turn it on): the setting; for each comment, and for each thread you validate with "Validate and apply", the commented text and its versions, its threads, its arcs, its brief and its references (links, file names, comments and excerpts of attached documents), sent to OpenAI as the reply or the application requires; the full text, sent to OpenAI once per version (and again after an edit) to generate a summary of it (and of its chapters) that gives the AI its bearings; a technical log of each reply (date, model, volume processed, status) and, if it modifies the style notes, their previous state (so the change can be undone) | Reply right away in the thread and, where relevant, adjust the style notes of the work-in-progress version (the "WIP" version in the workshop); on "Validate and apply", apply the validated thread's decision to the text of that same version: the reply and the change are generated by OpenAI | Performance of the contract (a feature you turn on and can turn off at any time) |
| Online help: your messages and the replies, the page you write from, the AI chosen on the "Connect your AI" page, the interface language, your account email if you are signed in, a fingerprint of your IP address (never the address itself) | Answer your questions: a reply is generated by OpenAI, and each conversation is emailed to the operator, who may reply to you; limit abuse | Legitimate interest; performance of the contract for accounts |
| Analytics: product usage events (page views, time spent on and share read of a page, time of your last action on the page, actions such as "text created" or "AI connected", tools called by your AI), an anonymous identifier kept in a cookie, the city derived from your IP address (the address itself is not kept), your device and browser type, linked to your account (email) when you are signed in — never the content of your texts | Understand how the service is used and improve it | Legitimate interest |
| Internal notifications to the operator: email to the operator when a new account signs up (email, name, device type), when a signed-in account reads a book in the classics library, comments on it or reports an error in it, or for each online help message (the conversation, the page, the device type) | Monitor service activity, moderate | Legitimate interest |
| Technical logs at our hosting providers (e.g. IP address, browser, date and page requested) | Security, troubleshooting | Legitimate interest; legal obligations |
The content of your workshop texts and working threads is never emailed to the operator.
4. The AI you connect
Inspired One offers an MCP server that lets your own AI (Claude by Anthropic, ChatGPT by OpenAI, or another MCP client) read, comment on and rewrite your texts.
- This access exists only if you authorize it, and you can revoke it at any time in your Settings ("Connected AIs").
- When your AI reads a text, its provider processes it, under your own account and under the terms you accepted with that provider. That provider is not our processor. Please read its privacy policy.
- Inspired One itself does not send any of your texts to an AI provider, unless you turn on the immediate AI reply (see below). Online help messages also go to OpenAI.
Immediate AI reply. If you turn it on in your Settings (it is off by default), an Inspired One AI replies in the thread as soon as you comment on one of your texts. To do so, the commented text and its versions, its threads, its arcs, its brief (statement of intent, style notes) and its references (links, file names, your comments and excerpts of attached documents, including works by other authors you placed there) are sent to OpenAI, our processor, as the reply requires. When you validate a thread with "Validate and apply", this AI also applies that thread's decision to the text of the work-in-progress version (the "WIP" version in the workshop) right away, with the same data, and says in the thread what it changed (before → after); the previous, frozen version is not modified. The full text is also sent once per version, and again after an edit, to generate a summary that gives the AI its bearings. This AI may also modify the style notes of that same work-in-progress version; their previous state is kept so the change can be undone. Its replies are signed "IA Inspired One". You can turn it off at any time: no new reply is prepared from then on, and a reply already being prepared stops at its next step, usually within a minute.
Online help. The messages you write in the online help are sent to OpenAI, our processor, to generate the reply. It is not your AI: do not write passwords or sensitive data there.
5. Operator access
The operator (Inspired One's administrator) can read your texts, read-only, solely for support (for example at your request), moderation and security. It never modifies them.
6. What is public
- Texts you publish (at an address such as inspired.one/<handle>/<text>), your author page and the share image are accessible to everyone and may be indexed by search engines.
- The workshop documents you mark "Published" — statement of intent, style guidelines, references (links, texts, attached PDF files) — are shown under the published text ("Behind the text" section) and accessible to everyone, as long as the setting is on for the version shown at the text's address (earlier versions, still readable, do not show them). Everything is private by default; the comments you attach to a reference are never published.
- Reader comments are public. They are signed with the reader's handle or, if none, "First name L.".
- Your email address is never displayed publicly.
7. Recipients and processors
Your data is not sold. It is processed by the operator and by the following providers, solely to run the service:
| Provider | Role | Location |
|---|---|---|
| Vercel Inc. (Covina, California, USA) | Website hosting and server functions | United States and Vercel's global network |
| Hetzner Online GmbH (Gunzenhausen, Germany) | Database and file hosting | Germany (EU) |
| Resend (Plus Five Five, Inc., San Francisco, USA) | Sending emails | United States |
| PostHog Inc. (San Francisco, USA), PostHog Cloud EU | Product analytics | Frankfurt, Germany (EU) |
| OpenAI (San Francisco, USA) | Generating the online help replies and, if you turn it on, the immediate AI reply in your threads | United States |
| Google (Google Ireland Limited, Dublin, Ireland) | Sign-in with Google | Google acts as an independent controller for your Google account; its own privacy policy applies. |
Your data may also be disclosed to authorities where required by law.
8. Transfers outside the European Union
Some providers (Vercel, Resend, Google, OpenAI) may process data in the United States. These transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, to which these companies have adhered, and/or on the European Commission's standard contractual clauses.
9. How long?
| Data | Retention |
|---|---|
| Account, texts, versions, notes, arcs, references, workshop threads | As long as your account exists. Deleted within 30 days of your deletion request (by email to nicoconut@nicoconut.com; self-service deletion is not yet available). |
| Published copies | Deleted as soon as you unpublish the version. The text's address stays reserved for your account. |
| Share image | Until you remove it or your account is deleted |
| Previous public handle | Kept to redirect to the new one, until another account takes it |
| Reader comments | Until deleted. A deleted comment is emptied of its text; only an unreadable technical fingerprint is kept, against spam. |
| Notification log | Content erased once the email or digest is sent; entries purged after 30 days |
| Connected AI tokens | Until you revoke them in your Settings or the account is deleted |
| Immediate AI reply: text summary, reply log (including the previous state of style notes modified by the AI) | As long as the text (for the summary) or the thread (for the log) exists; the AI's replies are comments in the thread, kept like it |
| Online help conversations | 12 months after the last message, then deleted automatically from our database; the copies emailed to the operator are deleted within the same period |
| Analytics | 1 year at most |
| Technical logs | According to each hosting provider's policy |
Some data may be kept longer where required by law.
10. Cookies and local storage
Inspired One uses cookies that are necessary for the service or for your settings, which are exempt from consent, and one analytics cookie (PostHog), set by the site itself and never shared with other sites. There are no advertising cookies.
| Name | Purpose | Duration |
|---|---|---|
authjs.session-token and related Auth.js (NextAuth) technical cookies |
Keep you signed in and secure the Google sign-in | Session: up to 30 days; others: for the duration of sign-in |
__classiques_oauth_request |
Remember the authorization request while you connect your AI | 10 minutes |
rdg |
Display preferences (theme…) | 1 year |
sidebar-width, arc-panel-width |
Panel widths | 1 year |
instr-collapsed |
Collapsed sections | 1 year |
ph_<project key>_posthog (cookie and local storage) |
Analytics: anonymous identifier used to count unique visitors | 1 year |
Browser local storage: if you read without signing in, your reading progress is kept on your device (localStorage). When you first sign in, it is attached to your account. The online help conversation is kept for the duration of your visit (sessionStorage). You can clear them at any time from your browser.
11. Your rights
You have the right to access, rectify, erase, restrict and port your data. You may also object to processing based on our legitimate interest, including analytics. You can also set instructions on what happens to your data after your death (a right under French law).
Write to nicoconut@nicoconut.com. We reply within one month.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or with the authority of your country.
12. Minors
The service sets no minimum age. In France, where processing is based on consent, a minor under 15 needs the agreement of a holder of parental authority. Inspired One's processing relies mainly on the performance of the contract (the Terms).
13. Security
Connections to the site are encrypted (HTTPS) and access to the database is restricted.
14. Changes
We may update this policy. The date of the last update appears at the top of the page. If there is a significant change, we will inform you by email or on the site.