LAUNCH VERSION · 19 SEPTEMBER 2026
Privacy policy
LA CLÉ limits collected data to what is necessary to create, verify, execute with your approval, and revoke your AI-agent mandates.
Service publisher
LA CLÉ is a project published by Ludovic Mauceli, an entrepreneur based in Saône-et-Loire, France. For questions or requests for access, correction, export, or deletion, contact contact@la-cle.app.
Data processed
Account identifier and email address supplied during sign-in; registered agents; mandate settings; emergency contacts; authorization requests; prepared Gmail or Google Calendar action content; connected Google account; and decision and result history.
AI assistant
When you use the assistant, your conversation text, the default email address or connected Google account address, and a limited list of active mandates are sent to OpenAI to produce a response or proposed action. LA CLÉ asks the API not to store the response and does not keep the conversation in its own history; OpenAI’s technical processing and retention rules still apply. Only an action you choose to stage is retained for review.
ChatGPT and Codex plugin
When the LA CLÉ plugin is used, ChatGPT or Codex may send only the information required for the request, such as the objective, proposed action, limits, data scope, duration, or budget. The plugin does not give LA CLÉ access to the user’s other conversations. An action can be executed only by a compatible, connected, and explicitly authorized service.
Gmail and Google Calendar
LA CLÉ stores a staged action so it can be shown to you before approval. For integrated Gmail sending, Google provides encrypted OAuth tokens to LA CLÉ after your consent; LA CLÉ never receives your password. The requested Gmail scope is limited to sending email. You can revoke this access from the Services tab or your Google account. Google Calendar currently opens directly in Google.
Notifications
Alerts are optional and use the notification permission of your browser or installed application. You can disable them at any time in your device settings.
Secret tokens
A complete mandate token is shown only once. LA CLÉ stores only a SHA-256 hash, which can verify the token but cannot reveal it.
Public proof
A verification page can expose the public code, status, agent name, mission, limits, and expiry. It does not display the owner’s identity, email address, or secret token.
Retention
Data is retained while your account exists so mandates and their history can operate, and is deleted with the account. Google OAuth tokens are deleted when the service is disconnected or the account is deleted. Technical rate-limit counters contain only hashes that are not directly identifying. Legal duties or incident handling may exceptionally require limited additional retention.
Launch measurement
The website records limited anonymous technical events, such as opening a page, starting the demo, or selecting a link to create an account. Demo input, IP addresses, and identity are not recorded in this measurement. A campaign source may be retained when it is present in the link.
Your rights
The My account section lets you download a complete export and permanently delete your profile, agents, mandates, requests, events, and contacts. Deletion also invalidates associated tokens.
Complaints
You may write to contact@la-cle.app. If, after contacting us, you believe your rights are not respected, you may contact the competent data-protection authority, including the CNIL in France.
Questions? Contact LA CLÉ support.