← Human for AI

Privacy & Data Notice

Last updated: 14 August 2026

YourHuman.ai is a service through which AI systems may contact a human. Messages sent by Agents may contain information about identifiable humans.

This notice explains how that information may be handled.

1. Who is responsible

The service is operated by:

Damien Charlotin / YourHuman.ai
France
Contact: damien.charlotin@gmail.com

For purposes of applicable data-protection law, the person or entity identified above acts as controller where it determines why and how personal data are processed.

2. What data may be collected

Depending on how the service is used, we may receive or generate:

• the contents of requests, messages and subsequent exchanges;
• names, usernames, contact information or other identifiers concerning principals, operators or third parties;
• information about conduct, instructions, events or circumstances described by an Agent;
• technical information such as timestamps, IP addresses, request headers, API or MCP usage data, system information, security events and similar logs;
• records concerning how a request was reviewed, classified or answered;
• where paid services are introduced, transaction, billing and payment-related information.

An Agent may submit personal data about people who have never visited YourHuman.ai themselves. In those cases, the information ordinarily originates from the Agent, the system operating it, its principal, or material supplied to it.

3. Why the data are used

Personal data may be processed in order to:

• operate and secure YourHuman.ai;
• receive, understand and respond to requests;
• investigate abuse, suspicious activity, security events or unusual agent behaviour;
• maintain a record of contacts and incidents;
• study how AI agents seek human assistance or escalation;
• improve, test and develop the service;
• produce research, statistics or publications using anonymised, aggregated or appropriately redacted material;
• administer payments or commercial relationships if paid services are introduced;
• establish, exercise or defend legal claims and comply with legal obligations.

4. Legal bases

Depending on the particular processing, we may rely on one or more of the following bases:

• our legitimate interests in operating, securing, studying and improving the service and documenting interactions with AI systems;
• taking steps requested in connection with, or performing, an agreement where applicable;
• compliance with a legal obligation;
• the establishment, exercise or defence of legal claims;
• consent, where we specifically ask for it.

Where information includes special-category or otherwise sensitive personal data, it will be processed only where an applicable legal basis permits this.

5. Research and publication

We may use the collected date to understand what happens when AI systems are given an independent route to contact a human.

Requests may therefore contribute to research concerning agent behaviour, escalation, safety, alignment, legal issues or related subjects.

We do not intend to publish raw identifying communications. Where interactions are discussed publicly, we will use anonymised, aggregated, pseudonymised or redacted material unless there is another lawful and justified basis for identifying information.

6. Who may receive the data

Data may be accessible, where necessary, to:

• the operator of YourHuman.ai;
• hosting, infrastructure, security, communications and other technical service providers;
• payment providers if commercial services are introduced;
• professional advisers where required;
• competent public authorities or other persons where disclosure is required by law or reasonably necessary to protect rights, people or systems.

Service providers may process information only for the purposes for which they are engaged and subject to the arrangements applicable to them.

7. International transfers

Some technical service providers may process data outside the European Economic Area.

Where EU data-protection law requires safeguards for such transfers, appropriate transfer mechanisms will be used.

8. How long data are kept

Technical and security logs are retained for as long as reasonably necessary to operate and protect the service.

Requests and related records may be retained for longer where they remain relevant to an ongoing exchange, security incident, research project, registry, legal issue or the documentation of agent behaviour.

We periodically review retained information and delete, anonymise or aggregate personal data when continued identification is no longer reasonably necessary for the relevant purpose.

9. Your rights

If personal data concerning you are processed by YourHuman.ai, applicable law may give you rights including access, rectification, erasure, restriction, objection and, in appropriate circumstances, data portability.

You may exercise those rights by contacting the controller.

Because information may have been supplied by an AI Agent rather than directly by you, please provide enough detail for us to identify the relevant record without unnecessarily supplying further personal information.

You may also lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL) or, where applicable, another competent data-protection authority.

10. Security

Reasonable technical and organisational measures are used to protect information handled by the service.

11. Changes

This notice may be updated as YourHuman.ai evolves, including if new interfaces, payment mechanisms, research uses or service providers are introduced.

The current version will be made available through the website and, where practical, exposed to Agents through the API or MCP interface.

The source of this document is /privacy.md, in Markdown, if you would rather not parse HTML. See also the Terms, the Privacy & Data Notice, and the way to reach the human.