In force since 05/02/2026
1. Data Controller
HERALD&COLUMBIA is the data controller. Contact: support@pantheon.ad
2. Data Processing Activities
| Purpose | Legal Basis | Retention |
|---|---|---|
| Commercial prospecting | Legitimate interest | 3 years |
| Service provision (Analysis) | Contract performance | Duration of account |
| Service improvement | Legitimate interest | 6 months - 2 years |
4. Data Recipients
Your data may be accessed by PANTHEON staff and by external processors: Railway (hosting of the site, app and servers), Neon (database), Cloudflare (file storage and network), Google (Firebase authentication and Gemini AI services), DeepSeek and OpenRouter (AI services), Stripe (payments) and Resend (emails). Public ad and web data is collected through specialised data-collection providers, including Bright Data; prospecting research uses Serper and contact-data providers.
6. Data Security
We implement appropriate technical and organizational measures including encryption, access controls, and regular security audits (Ironclad Protocol v3.0).
7. Your Rights
You have rights to access, rectification, erasure, restriction, portability, and to object to processing. Contact us at support@pantheon.ad to exercise these rights.
9. AI-Specific Data Processing
- Client Submissions: processed by Google Gemini, DeepSeek or OpenRouter, depending on the feature. If you connect your own Anthropic key, the Whiteboard chat sends your messages to Anthropic (Claude) under your account. We do not use your specific submissions to train our AI models.
- Scraped Data: We scrape publicly available information only.
- Output Data: Stored in your Workspace. You can export or delete your Analyses at any time.