Terms of Use & Privacy Policy

Last updated: July 2026

Privacy policy

This privacy policy describes the personal data processing relating to the FATGRAD service, designed and maintained by Gros Gradient.

Data collected & usage

We only collect data strictly necessary for the operation, security, and improvement of the services.

Data collected:

Identification: first name, last name, email; profile photo only via Google OAuth (URL provided by Google, not hosted by us)
Session: session identifiers, IP address, user-agent
Preferences: interface language (cookie)
Submitted content: files and text (CVs, job offers, audio, images…) processed to provide the requested service
Payment: transaction metadata (amount, currency, credits); full billing is managed by Stripe
Anti-fraud: anonymized, non-reversible hash of the email, retained for up to 2 years after last activity; if the account is deleted, this hash may be kept for up to 2 additional years to prevent abusive re-registration
Marketing: opt-in preference for promotional emails (no promotional emails sent at this time)
Credit usage: consumption logs (dates, service used, credits debited, status)
Contractual proof: timestamped acceptance of the Terms of Use when purchasing credits (terms version, IP address)

Purposes:

Provide account access and credit purchases
Display the localized interface
Prevent fraud and automated abuse
Ensure service performance and stability
Send sign-in emails (magic link)
Process content you submit (text via OpenAI, Europe region; visuals and sign-in via Google services)
Send promotional emails only with your consent (unsubscribe anytime from the dashboard)
Document acceptance of the Terms of Use and credit consumption (contractual proof and abuse prevention)

Legal basis:

Contractual necessity (account access, service delivery)
Legitimate interest (security, anti-fraud, performance, inactive account removal)
Consent (promotional emails)
Consent (acceptance of the Terms of Use when purchasing credits)

Terms of Use

Article 1 — Purpose

These Terms of Use and Sale (hereinafter "Terms") govern access to and use of the FATGRAD service. Like any digital service offered to the public, FATGRAD must be tied to an identified person who is both the service operator and publication director under the French LCEN, responsible for contractual matters, billing, and regulatory compliance toward users (hereinafter "the operator"). This is , with registered address at , reachable at contact@fatgrad.com. Pursuant to Article 6(I)(2) of the French LCEN, the hosting provider is Railway Corporation, 548 Market Street, PMB 68956, San Francisco, CA 94104, États-Unis, contact: hello@railway.com. Production environments are deployed on Railway infrastructure in the Netherlands (European Union). All site elements (text, graphics, logo, structure) are protected by intellectual property law; any unauthorized reproduction is prohibited. By using FATGRAD, you unreservedly accept these Terms.

Article 2 — Access to the service

The service is accessible to any adult with Internet access. Registration is via Google OAuth or a magic link sent to the email address provided.

Each user is responsible for keeping their login credentials confidential and for all activity carried out from their account.

Article 3 — Credit-based operation

Access to FATGRAD features, including monthly hosting services, works exclusively through a prepaid credit system. There is no recurring automatic subscription: renewal of any service, including hosting, is done manually by the user using their credits. The operator cannot be held liable for interruption of a service whose credits were not renewed by the user in time.

Credits are purchased via Stripe and credited immediately to the user's account after payment confirmation.

A balance of free credits may be granted upon account creation, under conditions and limits determined at the operator's discretion, and may be changed at any time without notice.

Article 4 — Right of withdrawal

Under applicable consumer law, the 14-day right of withdrawal does not apply to digital content supplied on an intangible medium where performance has begun with the consumer's prior express agreement and express waiver of the right of withdrawal.

By purchasing credits and checking the box provided for this purpose at checkout, the user expressly acknowledges that service performance begins upon purchase and consequently waives the 14-day right of withdrawal for purchased credits.

Article 5 — Refund policy and abuse prevention

Purchased credits are non-refundable, except where mandatory law provides otherwise.

In the event of a technical generation failure (system error, outage, bug preventing output), the corresponding credits are not deducted from the user's account and remain available for a new attempt.

However, results produced by artificial intelligence systems used by FATGRAD may contain inaccuracies, approximations, or content errors. Consumption of credits for a technically successful generation whose content does not meet the user's expectations does not entitle the user to a refund. It is the user's responsibility to review and, where applicable, correct generated content before any use.

In the event of a chargeback initiated with the card issuer for credits already used, the operator reserves the right to produce, as evidence, account usage logs (dates, actions, outputs produced) demonstrating effective performance of the service, as well as proof of express acceptance of the waiver of the right of withdrawal referred to in Article 4. The operator also reserves the right to immediately suspend access to the account concerned and to refuse any future access to the service, without notice or compensation, to a user who has initiated an unjustified chargeback for credits actually consumed.

Any account creation solely to repeatedly benefit from signup free credits (multiple accounts, falsified identities, circumvention of anti-abuse technical measures) constitutes abusive use of the service under these Terms. Such use may result, without notice, in suspension or deletion of the accounts concerned and cancellation of the corresponding credits, whether free or paid.

Article 6 — Legal warranties

Where applicable, consumer users benefit from the legal conformity warranty and the warranty against hidden defects, to the extent these warranties apply to the nature of the service provided.

Article 7 — Liability

FATGRAD uses reasonable means to ensure service availability and reliability, without guaranteeing results. The operator cannot be held liable for: indirect damages resulting from use of the service; the accuracy, relevance, or reliability of content generated by artificial intelligence systems integrated into the service; service interruptions due to external causes, including those affecting the technical providers mentioned in the privacy policy.

Article 8 — Termination

The user may delete their account at any time from the dashboard. Unused credits at the time of deletion are permanently forfeited, without refund, in accordance with Article 5.

The operator reserves the right to suspend or terminate access for any user who fails to comply with these Terms, including abusive use referred to in Article 5.

Article 9 — Changes to the Terms

The operator reserves the right to modify these Terms at any time. Users will be informed of any material change. Continued use of the service after modification constitutes acceptance of the new terms.

Article 10 — Governing law and disputes

These Terms are governed by French law. In the event of a dispute, and after an attempt at amicable resolution, the competent French courts shall have exclusive jurisdiction, subject to mandatory provisions applicable to consumers, who may in particular refer the matter to a consumer mediator.

For any questions regarding these Terms, you can contact us at contact@fatgrad.com.

Our technical partners

To operate, FATGRAD relies on a set of carefully selected technical providers, primarily located within the European Union. Application hosting is provided by Railway, with infrastructure based in the Netherlands. The database is managed by Supabase, also hosted in the European Union, while file storage uses Cloudflare R2 under European jurisdiction.

Payment processing is handled by Stripe Payments Europe, the Irish entity of the Stripe group. Transactional sign-in emails (magic links) are sent via Resend. Processing of certain text content uses OpenAI models in the Europe region, while Google OAuth sign-in and visual content processing use Google LLC services.

Some of these exchanges involve data transfers outside the European Union — notably to the United States for Resend technical logs, Railway's control plane, or processing by Google LLC. These transfers are systematically governed by data processing agreements (DPAs) and, where necessary, by EU Standard Contractual Clauses approved by the European Commission. Each partner's data processing agreement is available on request at the contact address indicated in Article 10 of the Terms of Use.

No personal data is sold to third parties for any purpose.

Recipients:

Your data is processed by FATGRAD and shared, as needed for the service, with the technical partners described earlier on this page. No data is sold to third parties.

Note: your account is shared across all FATGRAD services. Your account data, credits, and preferences are accessible across all FATGRAD products.

Retention periods:

Account data: deleted on request; accounts inactive for 1 year are automatically deleted
Anti-fraud hash: up to 2 years after last activity; possible extension after account deletion (see above)
Input files: 12 hours; output files: 30 days; public CV hosting: 1 to 12 months
Billing (FATGRAD-side metadata): deleted or anonymized on account deletion. Stripe, as payment provider, retains transaction data and supporting documents under its own legal obligations (invoices, accounting)
Account deletion: erasure of identifiable data, content, usage logs, and Terms of Use acceptance records linked to the account; limited retention of the anti-fraud hash (see above)
Technical logs: per our hosts' retention periods (Railway, Supabase)

International transfers

Our core services are hosted in the European Union. Any transfers outside the EU carried out by some of our technical partners are described in the section dedicated to them earlier on this page.

Cookies

We do not use advertising cookies. Only the following strictly necessary or functional cookies are set:

Session cookies (authentication)
Language cookie (interface preference)

Your rights:

Under the GDPR, you may request:

Access to or export of your data (JSON from the dashboard; binary files are not included, only metadata and links)
Rectification of incorrect information
Deletion of your data (dashboard → "Delete account")
Restriction of or objection to certain processing
To lodge a complaint with your supervisory authority (in France: www.cnil.fr)

To exercise these rights, contact us at the address indicated in Article 10 of the Terms of Use above.