General Terms of Use (GTC)

Preamble: The purpose of these General Terms and Conditions of Use (CGU) is to define the terms and conditions for the use of the services offered by MyUniSpace, a suite of online SaaS tools operated by EI Hugo Rochette (commercial name: UniGency). By accessing the services of MyUniSpace, you accept these Terms of Reference.

Legal information Company : EI Hugo Rochette (UniGency)

Editorial Officer Mr. Hugo Rochette

Head Office: 18, Route des Granges, Messimy, 69510, France

Email: [email protected]

Website and their subdomains: myunispace.com

DPO: EI ALAN BEDRINE (UNIDRINE) (contact: [email protected])

Conditions of access

To access MyUniSpace services, you must:

The User declares to be at least 15 years of age and to have legal capacity to consent to these General Terms and Conditions.
To reside in a European Union country or in the United States.

Definitions

The following terms are defined in the present GUC as follows:

LCEN: The Digital Economy Trust Act is a 2004 French law to regulate digital services, protect users and ensure the regulation of the digital economy in France.
GDPR: The General Data Protection Regulation is a European Union regulation which entered into force in May 2018, aimed at strengthening the protection of personal data and the confidentiality of users within the EU.
SaaS: Software as a Service (software as a service) is a software distribution model in which the provider hosts applications and makes them accessible to its users via the Internet, rather than being installed locally on a server or personal computer.
API: Interface of Programming of Application is a set of rules allowing different software to communicate with each other. APIs allow an application to access the functionality or data of another service.
Date of registration: The date of recording of the data corresponds to the precise time when the data are collected and stored, including the time, minute and second, depending on the time zone of Paris (CET/CEST).

Article 1.1: Description of services

MyUniSpace offers a suite of collaborative and utility tools available online, for startups and teams. Each service collects specific data necessary for its operation, detailed below. Central infrastructure MyUniSpace is located within the European Union. Data transmissions to third party partner services (such as OpenAI, Mistral AI, Anthropic, Google AI or Daily) are strictly conditioned by prior and optional activation of the corresponding functionality by the User.

List of tools:

1. Insight IA

Description: Conversational assistant based on artificial intelligence. The User freely chooses the model of AI that he wishes to use from among the providers available: Anthropic (Claude), Google AI (Gemini), Mistral AI and OpenAI (GPT).
Data collected: User ID, message history exchanged, generated responses, user selected template, date of registration.
Transmission: Requests (prompts) are transmitted exclusively to the only provider selected by the User (Mistral AI in France, or OpenAI, Anthropic, Google AI in the United States) for the only generation of the answer. These data are not used to train third party models. The flows to providers established outside the European Union are regulated by the European Commission's Contractual Types Clauses (CCT).

2. UniTransfer

Description: Secure file transfer service.
Data collected: User ID, transferred files, saving date, password protection (if enabled), generated shortened URL, download statistics.
Security: Transfers are encrypted (HTTPS).
Subcontracting: Files are hosted on a secure S3 infrastructure operated by Hetzner.

3. UniNote

Description: Advanced note-taking tool. Allows note sharing via a single public link or real-time collaboration with other users MyUniSpace (add by email).
Data collected: User ID, note content, status, email addresses of guest collaborators, generated sharing links, date of registration.
Editorial responsibility: The User is solely responsible for the content of the notes made public via sharing link.

MyUniSpace reserves the right to disable any sharing link whose content would be reported as manifestly unlawful, in accordance with the NCL. Any alert may be sent to [email protected].

4. UniCloud

Description: Online file storage space.
Data collected: Imported files and folders, tree structure, file metadata.
Security: Transfers are encrypted (HTTPS).
Subcontracting: Files are hosted on a secure S3 infrastructure operated by Hetzner.

5. UniPrivacy

Description: Creating encrypted notes.
Data collected: Content of notes and passwords, fully encrypted in database before storage. We have no way to retrieve or read this data, even if the password is lost by the user.

MyUniSpace in no case may be held liable for the permanent loss of data resulting from forgetfulness or loss of password by the User.

6. UniChat

Description: Instant messaging and video conferencing tool (audio and video calls) between members of MyUniSpace.
Data collected: User ID, text message content, shared files, activity logs.
Transmission: Text message data is stored by MyUniSpace. For audio and video calls, data streams are transmitted and processed in real time by the 100ms third-party infrastructure. Audio and video streams are processed live and are not recorded or stored, or by MyUniSpace or 100ms.
Retention: Text messages are kept for the duration of the account activity and deleted within 30 days of the account closing. The activity logs shall be kept for up to 12 months for security and technical support purposes.

7. UniFlow

Description: Collaborative project manager. Allows user invitation MyUniSpace within specific projects. Integrate IA-assisted project creation functionality: the user can submit files (documents, images), free text and audio recordings (transcribed automatically to text via the browser transcription API) to automatically generate a project structure.
Data collected: User ID, project structure (columns, maps), task content, email addresses of guest collaborators, activity logs, files submitted for creation by IA, locally generated audio transcripts, prompts sent to IA provider.
Audio transcript: The transcription is done locally in the User's browser via the Web Speech API (or native equivalent). No audio streams are transmitted to MyUniSpace at this stage. Only the text resulting from the transcript can be sent to IA for processing.
Transmission IA: The submitted content (texts, transcripts, file metadata) is securely transmitted to Mistral AI for the sole purpose of generating the project structure. These data are not used to drive the models.

8. UniCalendar

Description: Interactive calendar with advanced rights management. Allows you to make a calendar visible to the client organization or to share it specifically with a panel user via their email (with possible allocation of modification rights).
Data collected: Titles and descriptions of events, dates and times, user IDs and emails with access to the calendar, access rights setting (read/write).

9. UniVisio

Description: Publicly accessible videoconferencing tool. Allows any user MyUniSpace create a video meeting via UniCalendar (combining a video with an event). The generated session is accessible by anyone with the link, without the need to have an account MyUniSpace.
Data collected: Identifier of the creator user, login of the video session, date of creation and expiration of the link, log-in (time, IP address of participants).
Transmission: Audio and video streams are processed in real time by the Daily infrastructure (Daily.co). These flows shall not be recorded or stored, or MyUniSpace or by Daily, unless explicit activation of a recording feature by the session creator.
Public access: The User is informed that any UniVisio login link generated is accessible by anyone in possession of this link, without authentication. It is his responsibility not to disseminate this link to unauthorized persons. MyUniSpace cannot be held responsible for any unwanted access resulting from the disclosure of the link by the User.
Subcontracting: Daily.co. Connection data transit through Daily servers in accordance with their own processing conditions. This transfer is supervised by Contractual Types Clauses (CCT) approved by the European Commission.

Article 1.2: Third Party Integrations (OAuth)

The User may choose to link his account MyUniSpace to third party services via the page « Integration » of his panel. These connections use OAuth secure protocol.

1. Cloud Storage Services (Google Drive, OneDrive)

Description: Allows direct import of documents to UniChat tools and Insight IA.
Data collected: Login identifiers (via OAuth token), metadata of selected files, content of imported documents.
Use: The data is used exclusively to feed the AI discussion contexts or to share files within the organization. MyUniSpace does not store a permanent copy of your entire third party drive, but only files specifically selected by the User.

2. Calendar Services (Google Calendar, Microsoft Outlook Calendar)

Description: Bilateral synchronization with UniCalendar tool.
Scope of access (Scope): By enabling this integration, the User authorizes MyUniSpace read, create, edit and delete events on its related calendars.
Operation:
– Any changes made on UniCalendar are passed on to the related third party calendar in real time.
– Any changes to the third-party calendar (Google or Microsoft) are synchronized to UniCalendar.
Data collected: Titles, descriptions, dates, schedules, venue of events and email addresses of participants.
Confidentiality: Tokens are encrypted as a database. The User may revoke these accesses at any time from its customer area or from the security settings of its Google/Microsoft account.

3. Google User Data Policy

In accordance with the Google API services policy, MyUniSpace commit on the following points concerning data collected via Google Drive and Google Calendar integrations:

Data accessed: MyUniSpace access login identifiers via encrypted OAuth tokens, metadata of files selected by the user on Google Drive, as well as the titles, descriptions, dates, schedules, locations and email addresses of Google Calendar event participants.
Use of data: These data are used exclusively to provide or improve the functionality requested by the user. This includes feeding discussion contexts for AI (Insight IA) and the bilateral synchronization of events between Google Calendar and UniCalendar.
Data sharing: MyUniSpace bans the transfer, transfer or lease of data from Google and Microsoft APIs to third parties, without legal injunction. The processing of this data is strictly limited to the technical execution of the context synchronization or indexing functions requested by the User. No Google data is used for advertising display or training artificial intelligence models.
Storage and Protection: Access tokens are fully encrypted as a database. Accommodation is provided by Contabo GmbH in Germany, ensuring a secure environment within the European Union.
Detention and Removal: MyUniSpace does not store a permanent copy of the entire drive, but only the specifically selected files. The user can revoke access at any time from his or her customer area or Google account settings. The account deletion MyUniSpace results in the deletion of all associated data.

Article 2: Accommodation and security

The entire application infrastructure and databases of MyUniSpace is hosted on the territory of the European Union by the company Contabo GmbH (Germany). By way of derogation, UniTransfer files are stored on Hetzner's isolated S3 infrastructure located in Germany.

Article 3: Protection of personal data

MyUniSpace complies with the GDPR and the LCEN for the collection and processing of personal data. Users have rights of access, rectification, opposition and deletion of their data, which can be exercised by contacting MyUniSpace or UniDrine DPO. In accordance with supplier requirements (Google Limited Use Policy and Microsoft APIs Terms), MyUniSpace undertakes to:

Use the data obtained via Google and Microsoft APIs only to provide or improve the calendar and storage features explicitly requested by the User.
Do not transfer this data to third parties, unless necessary to provide the services, to comply with the law or in the context of a merger/acquisition.
Do not use this data to display advertisements or to induce artificial intelligence models in an anonymized manner.

Access to personal data is strictly restricted to persons authorized by the EI Hugo Rochette (technical services and support) as well as to the DPO, only when strictly necessary for the performance, technical maintenance of services or compliance with legal obligations. Such access is governed by enhanced security and confidentiality measures.

Shelf life: Personal data collected as part of services MyUniSpace are kept for the duration of the User's account activity. From the end of the account, the data shall be deleted within a maximum of 30 days, with the exception of data whose retention is required by a legal obligation.

Transfers outside the European Union: Some providers MyUniSpace are established outside the European Union, including Daily.co (United States) for UniVisio, Anthropic (United States), Google AI (United States) and OpenAI (United States). These transfers are regulated by Contractual Types Clauses (CCTs) approved by the European Commission, guaranteeing an adequate level of protection of transferred data.

Sensitive data: The User undertakes not to submit, via the MyUniSpace (including Magic Project), sensitive personal data within the meaning of Article 9 GDPR (health data, political opinions, religious beliefs, biometric data, etc.) without obtaining the explicit consent of the data subject.

Cookies: MyUniSpace uses cookies for functional, statistical and, where appropriate, marketing purposes. The User can manage his preferences via the consent banner displayed on his first visit. For more information on the cookies used and their purposes, the User is invited to consult the cookie policy available on the website.

Article 4: Responsibilities

The User is responsible for the use he makes of the services of MyUniSpace. Any fraudulent use or non-compliance with existing laws may result in the suspension or deletion of the account.

MyUniSpace cannot be held responsible for service interruptions due to external causes, such as failures of hosting infrastructures (Contabo, Hetzner), integrated third party services (100ms, Daily, OpenAI, Mistral AI, Anthropic, Google, Microsoft) or any event constituting force majeure within the meaning of Article 1218 of the Civil Code (natural disaster, large-scale cyberattack, widespread network failure, government act, etc.).

MyUniSpace does not guarantee uninterrupted availability of services. No compensation may be claimed for any interruption of service, whether planned or not, unless there is a serious or established fault on the part of MyUniSpace.

The User declares to be at least 15 years of age and to have legal capacity to consent to these Terms and Conditions. If a minor is enrolled without parental consent, MyUniSpace reserves the right to delete the account concerned as soon as it becomes aware of this situation. MyUniSpace may not be held responsible for registrations made in violation of this age condition. The use of the Service is reserved for natural persons who are able to contract under French law.

The User is solely responsible for the content he creates, shares or makes public through the services of MyUniSpace (notes, files, messages, projects, videoconferencing sessions). MyUniSpace does not exercise any editorial control over these contents, but reserves the right to remove any manifestly unlawful content reported to it, in accordance with the NCL.

As part of the use of UniFlow's audio transcription functionality, the User undertakes to obtain prior explicit consent from any person whose voice is likely to be captured and transcribed. MyUniSpace shall not be liable for any use of this feature in violation of Article 226(1) of the Criminal Code relating to the infringement of privacy.

Fair Use of UniTransfer: UniTransfer service is strictly intended for one-time file transfer and should not be used as a permanent storage or archiving solution (type use) « Cloud »). The Editor reserves the right to delete any transfer or suspend access to the service in the event of misuse, including if the frequency, volume or retention time of the stored files diverts the service from its initial transfer function.

Article 5: Intellectual property

MyUniSpace's tools and content are protected by intellectual property law. Any unauthorized reproduction is prohibited.

Article 6: Modification of EGUs

In the event of a substantial change, the User will be notified with 15 days' notice. The continued use of services after this period is accepted. In case of refusal of new CGUs, the User must stop using the services and terminate his account.

Article 7: Closing of accounts

The User may delete his or her account via his or her customer area in the settings section, provided that he or she has previously terminated his or her active subscriptions and, if he or she is an administrator of an organization, has transferred or deleted the organization. He can also make the request by contacting MyUniSpace at [email protected].

In the event of suspension or closure of the account for serious breach of these CGUs (non-payment, fraudulent use, infringement of intellectual property), MyUniSpace reserves the right to act without notice. The User then has 30 days from the notification of the suspension to export his data via his customer space or by making the request to the support. After this period, the data will be permanently deleted.

For any faultless closure of the User, a 30-day notice will be respected, during which the User will be able to export all of his data.

Article 8: Applicable law and jurisdiction

These CGUs are governed by French law, regardless of the country of origin of the user. In the event of a dispute, the competent courts will be those of the company's head office.

Article 9: Specific Rights of US Users (CCPA)

These GUCs are governed by French law. However, Users residing in California (USA) enjoy the rights provided by the California Consumer Privacy Act (CCPA), including:

The right to know which personal data is collected.
The right to request their deletion.
The right to oppose their sale.

MyUniSpace does not sell the personal data of its Users. To exercise these rights, the Users concerned may contact MyUniSpace at [email protected] or the DPO at [email protected].

Amendment and entry into force on 22/06/2026