Privacy policy
Last updated: 1 October 2026
This English version is a translation; the French version prevails.
1. Who we are
Obside, the company behind Glove (hereinafter “Glove”), is the controller of the personal data described here. It is a French SAS with share capital of €22,723.20, registered with the Laval Trade and Companies Register (RCS) under number 839 062 767, with its registered office at 106 avenue Pierre de Coubertin, 53000 Laval, France.
This policy covers:
- the glove.team website, including its “Book a demo” and “Become a partner” forms;
- the Glove app (app.glove.team), used by our customers and their staff.
For any question about your data, or to exercise your rights, write to [email protected].
When the Glove app is installed at a customer’s, on its own servers, that customer is the controller of the data its installation processes. Glove then acts on its behalf, under the contract between them.
2. The data we process
We process data in two ways, depending on who decides how it is used.
On our own behalf
Glove is the controller: we decide why and how this data is used. We only collect what you give us and what the service needs to run.
| Where | Data |
|---|---|
| “Book a demo” form (glove.team) | First name, last name, work email, company, headcount; your phone number and your needs if you give them; the language of the page |
| “Become a partner” form (glove.team) | First name, last name, work email, company, what you do, your clients’ size; your phone number, website and message if you give them; the language of the page |
| Glove account (app.glove.team) | Name, email, password (never stored in plain text), chosen language and theme, the organizations and teams you belong to |
| Billing | Your organization’s billing details, its AI model usage, its invoices |
| Technical data | IP address and browser of each session, error logs |
On behalf of your organization
When you use the Glove app within your organization, what you and your colleagues put in it belongs to the organization: conversations, documents, files, agents, connections to your software and what they bring back. Your organization is the controller of this content. Glove only processes it as a processor, on its instructions, under the contract between them (data processing agreement):
- we only use it to provide you with the service;
- we never use it for our own purposes, nor to train AI models;
- to find out how your organization uses it, or to exercise your rights over it, contact your organization.
3. Why we use it
For the data we process on our own behalf, each use rests on a legal basis set out in the GDPR (Article 6).
| Purpose | Legal basis |
|---|---|
| Answering your demo or partnership request and getting back to you | Steps taken at your request before a contract |
| Telling you about our offers by email (business-to-business prospecting) | Glove’s legitimate interest; you can object at any time |
| Creating and managing your account, providing the service | Performance of the contract |
| Sending you the service’s emails (password resets, invitations) | Performance of the contract |
| Securing the service: limiting abuse, detecting errors | Glove’s legitimate interest |
| Measuring and billing AI model usage | Performance of the contract |
We don’t use your content to train AI models, and we sell no data.
4. Who can access it
Your data is read by the people at Glove who need it (sales for demo and partnership requests, engineering for support), and by the providers below, who act on our behalf and under contract.
| Provider | Role | Where the data is |
|---|---|---|
| Google Cloud France | Hosting the website, the app and the database | Belgium (europe-west1) |
| Google Cloud (Vertex AI) | AI models that answer in the app | European Union |
| Cloudflare | Routing and protecting traffic to our servers | Global network (US company) |
| Resend | Sending emails (replies to requests, the service’s emails) | United States |
| Sentry | Tracking technical errors; with your consent, masked replays of sessions that hit an error | Germany |
| PostHog (coming) | Measuring how the app is used, with your consent | European Union (Germany) |
In the app, your organization can also connect its own software or its own AI models: data sent to those services is sent at its request, under its responsibility.
5. Transfers outside the European Union
Our data is hosted in the European Union. Two providers are US companies:
- Resend stores the data of the emails it sends (recipient, subject, delivery logs) in the United States;
- Cloudflare routes the traffic of the website and the app through its network.
These transfers are covered by the European Commission’s standard contractual clauses and, for companies that have joined it, by the EU–US Data Privacy Framework. You can get a copy by writing to [email protected].
6. How long we keep it
| Data | Kept for |
|---|---|
| Demo and partnership requests, and prospecting contacts | 3 years after our last exchange (as the CNIL recommends) |
| Glove account | As long as the account exists; deleted when it is closed |
| An organization’s content | For the term of the contract; returned then deleted at its end, as the contract sets out |
| Sign-in sessions (IP address, browser) | Until the session expires or you sign out |
| Errors and session replays (Sentry) | 90 days |
| Billing data | 10 years, as the French Commercial Code requires |
At the end of these periods, the data is deleted or anonymized.
7. Your rights
At any time, by writing to [email protected], you can:
- access your data and get a copy of it;
- have it corrected or completed;
- have it erased;
- object to its use, prospecting in particular: every sales email also carries an unsubscribe link;
- ask for its processing to be restricted, or for its portability;
- set out what happens to your data after your death.
We answer within one month. If there is any doubt, we may ask you to prove your identity.
If your organization uses Glove, requests about its content are passed on to it: it decides on them.
If you believe your rights are not respected, you can complain to the CNIL, the French data protection authority (cnil.fr).
8. Cookies and trackers
We use no advertising cookies. The glove.team website sets no trackers; in the app, those that aren’t essential are only turned on with your consent.
- glove.team website: no cookies or trackers, so you aren’t asked anything when you arrive.
- Glove app, essential: a session cookie keeps you signed in, and your browser keeps your display preferences. They need no consent.
- Glove app, with your consent: replays of sessions that hit an error, by Sentry (all text, inputs and images masked, to fix the error, never to watch your work), and usage measurement by PostHog. Neither is turned on yet: we will ask for your consent in the app before turning them on, and you will be able to withdraw it at any time.
9. Security and changes
Traffic to the website and the app is encrypted (HTTPS). Passwords are stored as hashes, never in plain text, your software credentials are encrypted, and only the people who need it can access the servers. In the app, an agent never sees more than the person it works for.
We may change this policy, for instance for a new provider. The date of the last update is at the top of the page. If a change affects you directly, we will tell you by email.