Skip to main content
Kubbler is in beta. Spotted a bug or have feedback?Report a bugversion : 79e47e20
Without an engineering teamShop / TradeYour website and bookings, in your brand.Marketing / CommunicationsCampaigns online with no ticket to engineering.Coach / TrainerYour offer and bookings, in one place.Freelancer / IndependentYour rates online, requests that arrive priced.Internal team toolThe shared Excel file becomes an app.
With an engineering teamFounder / StartupThe MVP you don't throw away at the first customer.Product manager / DesignerThe prototype that is already the product.Agency / StudioOne foundation, all your clients, each isolated.Creator using AIYour AI-built app, online with real accounts.Developer / CTOThe plumbing handled, the app in plain view.IT leaders / CIOBusiness teams build, you keep the governance.
The product, end to end
Our approachHumans x AIHumans structure the code, AI interprets it. Who does what, and why that line.Read our approach
The chaptersBrand kitsThe library brand kits live, on one section and on a page.TemplatesStarting templates, composed pages, a page taken apart.BlocksThe library aisle by aisle, and the blocks that act.EditorsThe nine screens, from brief to live.DocumentationEditors, DSL, design system, in detail.
The toolsStudioFrom a description to a project, in seven steps.WorkshopThe page edited in place, block by block.MechanismsThe map of the project, from page to collections.API and dataCollections, their routes, their documents.Going liveHosting, domain, deployment.
All features
OverviewKubbler, piece by pieceWhat Kubbler puts together, and from what: five principles, then one chapter per piece.Read the principles
Who it's forShop / TradeMarketing / CommunicationsCoach / TrainerFreelancer / IndependentInternal team toolFounder / StartupProduct manager / DesignerAgency / StudioCreator using AIDeveloper / CTOIT leaders / CIOHumans x AI
FeaturesBrand kitsTemplatesBlocksEditorsDocumentationStudioWorkshopMechanismsAPI and dataGoing liveKubbler, piece by piece

General Terms of Sale and Service (CGV / CGS)

SaaS Technology Platform: Kubbler

Last updated: October 2026. In case of discrepancy, the French version prevails.

Contents

  • Preamble
  • Article 1: Definitions
  • Article 2: Corporate Purpose
  • Article 3: Subscription Plans and Financial Terms
  • Article 4: Use of Accounts, Security and Management of Secrets
  • Article 5: Intellectual Property, Licence and Restrictions
  • Article 6: Acceptable Use Charter and Customer Commitments
  • Article 7: Obligations, Duty of Advice and Pooling
  • Article 8: AI Features and Fair Use Policy
  • Article 9: Second-Tier Hosting Services (Subcontracting)
  • Article 10: Data Protection and GDPR Compliance
  • Article 11: LCEN Regime (Content Alerts)
  • Article 12: End of Contract, Reversibility and Destruction
  • Article 13: Limitation of Liability
  • Article 14: Governing Law and Jurisdiction

Preamble

These General Terms of Sale and Service (hereinafter the "Terms") govern access to and use of the services provided by Async Code, a single-shareholder simplified joint-stock company (SASU) with a share capital of EUR 100, whose registered office is at 14 rue Perronet, 92150 Suresnes, France, registered with the Nanterre Trade and Companies Register under number 952 918 936 (hereinafter the "Company").

The Company's customer, whether an individual or a business, is hereinafter the "Customer". The Company and the Customer are collectively the "Parties".

Article 1: Definitions

  • "Company" (or the "Provider"): means Async Code, a single-shareholder simplified joint-stock company (SASU) with a share capital of EUR 100, registered with the Nanterre Trade and Companies Register under number 952 918 936 00016 (EU VAT number: FR 77952918936), whose registered office is at 14 rue Perronet, 92150 Suresnes, France, publisher of the platform and the Services.
  • "Customer": means any natural or legal person, acting for professional (B2B) or private (B2C) purposes, who subscribes to the Company's Services and accepts these Terms.
  • "End User": means any natural person (for example, the Customer's own customers or users) authorised by the Customer to access and use the Generated Application.
  • "Contract": means the indivisible contractual whole formed by these General Terms and, where applicable, the special conditions or the subscription plan selected by the Customer.
  • "Services": means the online software platform published by the Company, providing automated access to a customisable code infrastructure (Scaffold) that is deployed through natural-language requests (prompts) interpreted by an Artificial Intelligence. The Services include generating the application, access to third-party APIs, provision of databases, managed IT operations and cloud hosting of the final application.
  • "Company Scaffold" / "Materials": means the high-level code architecture, templates, server configurations, internal frameworks, algorithms, pre-built databases and user interface that are the exclusive intellectual property of the Company and on which the generated applications are built.
  • "Third-Party AI Provider(s)": means the external providers of artificial intelligence models or related services that the Customer may access through the Company's platform (currently Anthropic; the Company may change provider and will inform the Customer).
  • "Third-Party Secrets Manager": means the external provider SharedEnv (or any equivalent tool selected by the Company), supplying a secure digital vault infrastructure with a "Zero-Knowledge" architecture, used to store, encrypt and transmit the Customer's deployment passwords and application secrets (API keys, database credentials).
  • "Infrastructure Subcontractor": means OVHcloud (or any other cloud infrastructure, physical hosting or first-tier server provider selected by the Company), owner or operator of the data centres and telecommunications networks on which the Company's platform, the Scaffold and the Customers' Generated Applications are hosted and managed.
  • "Generated Application" / "Deliverable(s)": means the final web application or website resulting from the Customer's automated customisation of the Company Scaffold through use of the Services.
  • "Customer Content": means all data, texts, images, trademarks, logos or prompts provided, submitted or stored by the Customer (or its End Users) in connection with use of the Services.

Article 2: Corporate Purpose

The Company's purpose, in France and abroad, is:

  • The publishing, development, programming and marketing of software, standardised or bespoke application solutions, source code building blocks, templates and digital platforms;
  • The provision, by licence or subscription (in particular SaaS - Software as a Service), of pre-developed, configured and tested software infrastructure to business or private users;
  • The supply of automation, customisation and deployment services for websites and web applications, in particular through the integration of artificial intelligence tools, application programming interfaces (APIs) and databases;
  • Data hosting, server management, managed IT operations and technical maintenance of all digital solutions and web applications;
  • Consulting, technical assistance, training and technical support services related to IT, web and software professions;
  • And more generally, all industrial, commercial or financial operations, involving movable or immovable property, that may relate directly or indirectly to the corporate purpose or to any similar or related purpose.

Article 3: Subscription Plans and Financial Terms

3.1 Online Subscription

The Customer acknowledges that the Services are standardised and automated. No personalised quote is issued unless the Customer explicitly and specifically requests one through the Company's official support channels. The Services are accessed exclusively by subscribing to the subscription plans on the Company's platform.

3.2 Price List

The applicable prices are those of the price list published on the site on the day of subscription. They are fixed and non-negotiable, stated in euros excluding tax (HT), plus VAT at the statutory rate in force (20%):

  • Initial Creation & Generation Fee: A single flat amount, set by the price list in force, is charged immediately upon subscription. This fee grants access to the AI generation tools and the Scaffold to design and configure the Generated Application.
  • Recurring Maintenance & Hosting Subscription: At the end of the first month following subscription, the Customer is automatically charged a recurring monthly amount, set by the price list in force, to cover continuous cloud hosting, managed IT operations and access to the application infrastructure.

3.3 Payment Terms and Security

Payment must be made by the payment methods made available by Stripe, in particular bank card. The Customer expressly agrees that their banking details are kept by Stripe, the Company's secure payment provider, for the execution of recurring charges.

3.4 Right of Termination and Notice

The Maintenance & Hosting subscription is concluded with no minimum commitment beyond the first month of activity. The Customer may terminate their subscription at any time, without notice, directly from their customer area: the subscription remains active until the end of the monthly period already paid, then ends. Sums already paid to the Company remain definitively acquired and will not be refunded on a pro rata basis.

3.5 Specific Terms for Individual Customers (B2C) and Waiver of the Right of Withdrawal

In accordance with article L.221-28, 1° and 13° of the French Consumer Code, a Customer acting as a consumer (individual) acknowledges and expressly accepts that provision of the Services involves the instant digital generation of the Generated Application as soon as payment is confirmed.

Accordingly, the Customer expressly requests immediate performance of the Services before the end of the statutory fourteen (14) day period and thereby expressly waives their right of withdrawal. No refund of the Initial Fee or of the Subscription may be demanded on that basis.

3.6 Price Changes and Indexation

The Provider may need to change the subscription price, in particular to pass on changes in the cost of the technologies and infrastructure required for the service (subject to inflation in cloud infrastructure server costs, API costs or other costs).

Where a price change is planned, the Provider will inform the Customer on a durable medium (by email) at least thirty (30) days before the new pricing takes effect.

In accordance with article L. 224-22 of the French Consumer Code, the Customer may then terminate the contract without penalty and without compensation, by written notice, within four (4) months after the change takes effect. Failing termination within that 4-month period, the new pricing will be deemed definitively applicable.

3.7 Non-Payment and Automatic "Cut-Off Right"

In the event of a rejected charge, an expired bank card or non-payment of an instalment, and after a reminder email has remained unanswered for 8 calendar days:

Express Termination Clause: The Company is legally entitled, by operation of law and without further notice, to immediately suspend access to the platform, cut the cloud hosting, and make the Customer's Generated Application completely inaccessible on the Internet. The Company disclaims all liability for any loss of data, traffic, customers or revenue suffered by the Customer as a result of this legitimate cut-off for non-payment.

Article 4: Use of Accounts, Security and Management of Secrets

4.1 Responsibility for Customer Credentials

The Customer is solely and entirely responsible for the confidentiality and security of the login credentials (emails, passwords) giving access to their area on the Company's platform. Any operation carried out from the Customer's account is deemed to have been carried out by the Customer.

4.2 Subcontracting of Password and Secrets Hosting (SharedEnv)

To operate the automated system and allow the Generated Application to be deployed, the platform needs to handle technical secrets (deployment passwords, third-party API keys, security tokens, database credentials).

  • Zero-Knowledge Architecture: The Customer is expressly informed that the hosting, storage and encryption of these secrets are outsourced and subcontracted to the Third-Party Secrets Manager SharedEnv.
  • Confidentiality Guarantee: The SharedEnv solution is integrated under a strict "Zero-Knowledge" protocol. Accordingly, the Customer's secrets are end-to-end encrypted before storage: neither the Company nor SharedEnv staff hold the decryption keys that would give access to the Customer's deployment passwords or tokens in clear text.

4.3 Limits of Liability Linked to the Third-Party Secrets Manager

The Company depends on the operational continuity and technical availability of SharedEnv's infrastructure. Accordingly:

  • The Company cannot be held liable for temporary unavailability, latency or bugs originating directly from SharedEnv's APIs or servers that block an automated deployment.
  • In the event of force majeure or a cyber attack of unforeseeable complexity specifically targeting SharedEnv's infrastructure, that third party's exemption from liability applies back-to-back to the Company. The Customer waives the right to hold the Company liable for any security incident whose exclusive origin is attributable to SharedEnv.

Article 5: Intellectual Property, Licence and Restrictions

5.1 Grant of Limited Licence

Subject to full and effective payment of the subscriptions due by the Customer, the Company grants the Customer a personal, limited, non-exclusive, non-transferable, non-assignable, worldwide and revocable licence to access and use the Company's Scaffold and the Services.

This licence is granted exclusively for the Customer's needs, to allow them to operate their Generated Application and make it available to their own end users, in strict compliance with the subscription plan taken out. No ownership right and no other right not expressly granted herein is transferred to the Customer. For the avoidance of doubt, this licence carries no right to access or retrieve the source files of the Scaffold or the underlying code.

5.2 Exclusive Ownership of the Company

The Services, the Kubbler platform, the technologies, algorithms, trademarks, logos, graphic charters, server configurations, and the entire Company Scaffold (including without limitation: source code, object code, software architectures, pre-built database configurations, methodologies, trade secrets and templates developed by the Company) are and remain the exclusive industrial and intellectual property of the Company or its licensors.

This contract does not transfer any intellectual property or underlying code to the Customer, who expressly acknowledges this.

5.3 Integration of Open Source Components and Free Software

The Customer is expressly informed that the Company Scaffold and the Generated Application incorporate, rely on or interact with third-party code building blocks, frameworks and software libraries distributed under free licences (so-called Open Source, such as MIT, Apache, BSD, etc.).

The usage licence granted by the Company is performed in strict compliance with these underlying open source licences. The Company disclaims all liability in the event of later changes to distribution terms, obsolescence, loss of maintenance or discovery of security flaws inherent in these third-party components, which it does not develop directly.

5.4 Exclusion of Warranty Against Eviction for Third-Party Technologies

The Kubbler solution and the Scaffold rely on third-party technologies and components (including, but not limited to, Next.js, React, and various third-party APIs and libraries).

Accordingly, the Company grants no warranty against eviction, whether express, statutory or implied, in respect of these software building blocks, components, APIs or third-party technologies. The Company cannot be held liable, and no action for infringement, claim or challenge of intellectual property rights (in particular relating to US, European or international patents) may be brought against it by the Customer because of the use of these third-party components.

Should a third party challenge the use of one of these building blocks, the Company would endeavour, as far as possible and on a best-efforts basis, to propose a technical workaround or replacement, without this constituting an obligation of result or giving rise to any compensation or refund for the Customer.

5.5 Use of Artificial Intelligence (AI) and Third-Party Services

The Kubbler platform includes Artificial Intelligence features that rely on third-party services, currently Anthropic (Claude).

  • Technological dependence: The Customer accepts that the provision of these features depends entirely on the availability, general terms and prices of these third-party providers. The Company cannot be held liable for service interruptions, API changes, performance degradation or access restrictions imposed by these third parties.
  • No warranty on results (Outputs): AI-generated results (the content, code or structures created) are provided "as is". The Company does not guarantee the relevance, accuracy, reliability, originality or legal compliance of AI-generated results. It is exclusively for the Customer to check and validate the results before any use.
  • AI intellectual property: Given the uncertain legal framework on patentability and copyright in AI-generated content, the Company does not guarantee that the generated results are protectable by an intellectual property right in favour of the Customer, nor that they do not infringe third-party rights. The Customer alone bears the risks of commercially exploiting AI results.

5.6 Protection, Anti-Piracy Measures and Proof of Prior Existence

The Customer is informed that all of the materials, software architecture, graphic mock-ups and source code making up the platform and the Scaffold are subject to strict protective measures intended to certify their prior existence and exclusive ownership. Accordingly, the Company has made official deposits of its techno-structures with approved bodies, in particular:

  • INPI (e-Soleau): With the French National Institute of Industrial Property (INPI) through the electronic Soleau Envelope scheme (e-Soleau), giving its creations an indisputable certain date;
  • APP (IDDN): With the Agency for the Protection of Programs (APP), giving the Company's internal tools and proprietary themes an official deposit certificate and an IDDN (Inter Deposit Digital Number).

5.7 Strict Restrictions on Use

The Customer is expressly forbidden, directly or through a third party, from:

  • Extracting, downloading, copying, reproducing, selling, renting, sublicensing, transferring or distributing the Company's Scaffold, the source code, the platform's underlying code, or the generic templates outside the strict execution environment provided by the Company;
  • Reverse engineering, decompiling, disassembling or attempting to discover the source code, algorithms or know-how of the Company's platform and Scaffold;
  • Sharing, lending or disclosing their account credentials to third parties, or using automated scripts, bots, crawlers or site scrapers on the platform without the Company's prior written authorisation;
  • Using the platform, the Scaffold, AI results or the Customer's prompts to train, develop, feed, test or improve, directly or indirectly, an artificial intelligence model or a code/application generation service that competes with the Company. The Company hereby expressly exercises its right to opt out of any use of the platform for text and data mining purposes.

Any breach of these restrictions constitutes a serious breach of contract, resulting in immediate termination of the usage licence and closure of the Customer's account without notice, without prejudice to any judicial, civil and criminal proceedings the Company may bring for infringement, breach of trade secrets and unfair competition.

5.8 Ownership of Customer Content and Prompts

The Customer retains full and exclusive ownership of their prompts (the instructions they enter) and their Customer Content (images, logos, imported texts, specific data).

The Customer grants the Company a technical, worldwide, non-exclusive, royalty-free licence, transferable (only to its technical subcontractors and strictly for the purposes of providing the Services), to host, use, reproduce and display this content and these prompts, as necessary for the operation, technical optimisation, automated deployment and maintenance of their Generated Application and the Company's Services. The Customer warrants that they hold all rights and authorisations necessary over this content and that it infringes no third-party rights.

5.9 Ownership of Generated Results

To the extent that intellectual property rights exist in the content specific to the Generated Application and derived from the Customer's prompts (texts, images, structural and design choices), the Company assigns those rights to the Customer, for the duration of their protection and worldwide. This assignment excludes the Scaffold, the Platform and their components, which remain governed by articles 5.1 to 5.3. It is granted subject to third-party rights, in particular those relating to AI models, their training data and open source components.

Given the legal uncertainty over the protection of AI-produced content, the Company does not guarantee that these results are protectable or that they are free of third-party rights. Identical or similar results may be produced for other users who made similar requests, without this constituting an infringement of the Customer's rights.

Article 6: Acceptable Use Charter and Customer Commitments

6.1 Prohibited Uses of the Generated Application

The Customer undertakes to use the platform and the Generated Application in a strictly lawful manner and in compliance with public policy. They are expressly forbidden from designing, deploying or hosting digital solutions whose purpose or effect is:

  • Any type of activity or content contrary to French law;
  • Phishing, spam, scams or fraudulent data collection;
  • The distribution of hateful, defamatory or harassing content, unregulated pornographic content, or content contrary to the protection of minors;
  • Piracy, streaming or illegal downloading that infringes third-party intellectual property rights;
  • The illegal trade in weapons, narcotics, counterfeit goods, or goods regulated without a licence.

Failure to comply with this charter entitles the Company to suspend the Customer's account immediately and without compensation.

6.2 Domain Name Management and DNS Configuration

The purchase, registration, payment and annual renewal of the domain names (e.g. .com, .fr) required to operate the Generated Application are exclusively and entirely the Customer's responsibility.

It is for the Customer to buy their domain name from a third-party registrar (e.g. OVH, Gandi, Namecheap) and to configure their DNS zones and servers to point to the IP address of the infrastructure provided by the Company.

The Company disclaims all liability for site outages, loss of traffic or cybersquatting resulting from incorrect DNS configuration by the Customer or from failure to renew their domain name with their registrar.

6.3 Warranty and Indemnification

The Customer holds the Company harmless against any claim, action or judgment brought by a third party and based on (i) the content, prompts or data they provide, (ii) the operation or publication of their Generated Application, including AI-produced results that they chose to put online, or (iii) a breach of these Terms. They indemnify the Company for the resulting damages, defence costs and reasonable legal fees.

The Company informs the Customer of the claim within a reasonable time and does not settle without the Customer's agreement, which may not be withheld without legitimate reason. This warranty does not apply to the extent that the damage results from gross negligence or wilful misconduct of the Company.

Article 7: Obligations, Duty of Advice and Pooling

7.1 Duty of Information and Advice (Article 1194 of the French Civil Code)

The Company is subject to a duty of information and advice as an IT service provider. The Customer is expressly informed, understands and accepts that the Services and hosting are provided through a pooled (shared) server infrastructure. The Company has fulfilled its duty by alerting the Customer to the characteristics, standardised architecture and technical limits of such pooling. It is for the Customer to ensure that the platform is suited to their particular professional needs.

7.2 Obligation of Means

The Company undertakes to bring all the care, diligence, tools and skills necessary to run its software automations and keep the infrastructure operational. However, the Parties expressly agree that all of the Company's obligations under these Terms are obligations of means. The Company cannot guarantee 100% uninterrupted or bug-free access.

7.3 Obligation of Security, Isolation and Logical Monitoring

The Company undertakes to implement logical security measures in line with the state of the art to ensure strict isolation of its pooled server spaces. It warrants that the automation scripts and database architectures are structured so that one customer of the platform can never access another customer's data. The Company undertakes to continuously monitor the overall load (CPU, RAM, bandwidth) of the infrastructure in order to prevent or throttle any abusive use by a Customer (a "noisy neighbour") that would degrade the performance and stability of other users' services.

Article 8: AI Features and Fair Use Policy

8.1 Dependence on Third-Party AI Providers

The Company's natural-language generation tool technically relies on API integration of models developed by Third-Party AI Providers. The Company depends on the operational continuity, performance, processing speed and contractual terms of these external providers. Accordingly, the Company can in no event guarantee the longevity, algorithmic stability, or total absence of interruption of the Services linked to the tools of these Third-Party AI Providers.

8.2 AI Fair Use Policy

Subscription plans include automated access to the Third-Party AI Providers' APIs sized for standard human use. The Customer shall not use external scripts, mass automated requests or robotic behaviour intended to saturate the platform's AI gateway. In the event of abnormal, disproportionate or abusive consumption of compute tokens that is likely to compromise the economic viability or stability of the platform, the Company reserves the right, by operation of law, to throttle the generation speed of the Customer's account, temporarily suspend its access to the AI tools, or apply additional billing after warning.

8.3 Exclusion Clause for "Hallucinations" and Code Errors

Generative artificial intelligence carries inherent risks of logical errors, bias or factually inaccurate data (hallucinations).

  • Customer's duty to check: The Generated Application is the direct product of the prompts written by the Customer. The Customer is solely responsible for testing, reviewing, checking and validating the technical operation and legal compliance of the resulting web application before it goes live and before any use in a high-risk or sensitive context (including medical, legal, financial or safety-critical uses).
  • Limitation of liability: The Company disclaims all liability if the Third-Party AI Provider produces faulty code, a software security flaw, a false textual statement, or an infringement of third-party rights within the Generated Application. The Customer is expressly forbidden from presenting automated AI results as being of human origin in contexts likely to deceive or cause harm to others.

8.4 Compliance with Regulation (EU) 2024/1689 (AI Act)

The Company is the provider of the AI system constituting the Platform within the meaning of article 3 of the Regulation, and a downstream provider of a general-purpose AI model operated by a third party. The Platform is not a high-risk AI system within the meaning of article 6 and Annex III of the Regulation. It meets the transparency obligations of article 50: conversational surfaces signal interaction with an AI, and generated editorial text content is delivered with a machine-readable provenance marking.

The Customer shall not use the Platform to design, train or operate a high-risk AI system within the meaning of Annex III of the Regulation without the Company's prior written agreement. Failing that, the Customer would be the provider within the meaning of article 25(1) of the Regulation and would alone assume all of the related obligations, in particular conformity assessment and registration. The Company undertakes, under a separate written agreement, to provide the Customer with the information, capabilities and technical assistance required by article 25(4). The Customer acts as deployer within the meaning of the Regulation for the Generated Application they publish.

Article 9: Second-Tier Hosting Services (Subcontracting)

9.1 Nature of Hosting and Limitation of Liability Linked to the Infrastructure

The Customer acknowledges and accepts that the Company does not own the physical data centres and acts exclusively as a second-tier host and managed-services provider. The hardware infrastructure, physical servers, connectivity and telecommunications networks used to run the Services are leased from specialised third-party providers, mainly OVHcloud (the "Infrastructure Subcontractor").

Accordingly, the Company's commitments on availability and hardware security are strictly limited to those given to it by the Infrastructure Subcontractor. The Company is subject to a mere obligation of means as regards monitoring this infrastructure.

The Company cannot be held liable for any direct or indirect damage resulting from a hardware failure specific to the Infrastructure Subcontractor's infrastructure, power or global Internet outages or fluctuations, large-scale denial-of-service (DDoS) attacks, acts of cyberterrorism, fires, floods, water damage or any other disaster affecting that subcontractor's data centres. The Parties expressly agree that such events, when they paralyse the third-party infrastructure, constitute force majeure and an act of a third party that fully exonerates the Company.

9.2 Application Service Level (SLA) and Sole Compensation

The Company endeavours to maintain an application availability rate of 99.5% for the platform, calculated on an annual basis (excluding force majeure and Infrastructure Subcontractor failures referred to in article 9.1).

Interruptions linked to planned preventive or corrective maintenance (in particular during off-peak hours between 00:00 and 05:00 Paris time) are not counted as unavailability.

If this rate is not reached over the year, and if the Customer is a business (B2B), the Company's liability will be strictly limited, as flat-rate and full-discharge compensation, to a credit note corresponding to the pro rata period of recorded unavailability, applied to the following month's invoice, to the exclusion of any other indemnity or damages.

9.3 Backup Policy and Customer's Critical Responsibility

  • Scope of the Company's Backups: As a managed service included in the Maintenance & Hosting subscription, the Company operates an automated backup protocol for the databases and essential files of the Generated Application. This backup is daily (run every night) with a retention period of thirty (30) days. To limit the risk of loss in the event of a major physical disaster, the Company endeavours to store and outsource these backups on a physical infrastructure that is geographically distinct and remote from the main production servers. This service is subject to an obligation of means.
  • Final and Exclusive Responsibility of the Customer: Notwithstanding the technical backup tools implemented by the Company, the Customer acknowledges that the risk of loss, alteration or corruption of data is a technological risk inherent in the Internet and in computer systems. The Customer remains the exclusive owner of their data and the ultimate party responsible for the security and permanent backup of their information. The Customer must, at regular intervals and under their sole responsibility, make their own extractions, exports and backups of their Customer Content and application structures using the export tools and features made available in the platform interface. The Company can in no event be required to compensate the Customer for any loss of data, loss of opportunity, loss of profit or file corruption occurring, including between two of the Company's automated backup runs.

Article 10: Data Protection and GDPR Compliance

10.1 Status and Roles (DPA)

In connection with the storage and processing of personal data passing through the Generated Application, the Customer acts as Data Controller and the Company acts as technical Processor within the meaning of article 28 of the GDPR. The detailed terms of processing are set out in the Data Processing Agreement (DPA), a contractual document published and versioned on the Company's site, accessible from the footer and annexed to these Terms, of which it forms an integral part. It is accepted by accepting these Terms; in case of conflict, it prevails over these Terms on everything concerning the protection of personal data. The Company undertakes to keep a record of processing activities carried out as a processor and to carry out processing only on the Customer's documented instructions.

10.2 Engagement of Sub-Processors

By accepting these Terms, the Customer grants the Company general written authorisation to engage the following third-party providers as sub-processors:

  • OVHcloud (OVH SAS) : hébergement physique, stockage des fichiers et des bases de données de l'Application Générée, et acheminement des e-mails transactionnels de la plateforme.
  • SharedEnv : hébergement hautement sécurisé, isolation et chiffrement des secrets, jetons d'accès et mots de passe de déploiement.
  • Anthropic PBC (États-Unis) : fourniture des modèles de langage qui génèrent et modifient le code. Seuls les prompts et les extraits de Contenu Client nécessaires au traitement d'une demande lui sont transmis, le temps de celle-ci. Ce transfert hors de l'Union européenne est encadré par les clauses contractuelles types adoptées par la Commission européenne, intégrées aux conditions commerciales de ce prestataire.
  • Stripe : traitement des paiements et conservation des coordonnées bancaires. Stripe collecte ces données directement auprès du Client ; la Société n'a jamais accès au numéro de carte.
  • Google (hors Union européenne) : fourniture de reCAPTCHA v3, qui vérifie qu'un envoi de formulaire provient d'un humain et non d'un automate, sur les formulaires exposés aux abus. Aujourd'hui la connexion et les signalements de bug ou d'abus. Cette vérification est exécutée à chaque envoi de formulaire protégé, y compris lorsque tous les traceurs facultatifs sont refusés : elle repose sur l'intérêt légitime de sécurité et non sur le consentement. Google reçoit à cette occasion l'adresse IP et des signaux d'interaction avec la page. Le même prestataire fournit également la mesure d'audience, mais celle-ci n'est activée qu'après consentement. Ces transferts hors de l'Union européenne s'opèrent sous les propres garanties de transfert de Google.
  • Discord (hors Union européenne) : réception des alertes techniques de supervision de l'infrastructure. Aucune donnée personnelle n'y transite : une alerte ne porte que l'identifiant technique du service concerné, la route appelée, le code de statut et des taux d'erreur. Les extraits de journaux applicatifs consultables depuis ce canal sont expurgés des adresses IP avant transmission.
  • healthchecks.io (hors Union européenne) : surveillance du bon fonctionnement de la chaîne d'alerte, par signal périodique. Aucune donnée personnelle n'y transite.

The Company warrants that all servers hosting Customer Content, databases, files and backups are strictly located in the territory of the European Union (France), at OVHcloud and SharedEnv. Code generation processing is an exception: it is carried out by Anthropic PBC in the United States, under the standard contractual clauses adopted by the European Commission pursuant to article 46.2.c of the GDPR, incorporated into that provider's commercial terms. In accordance with article 28.2 of the GDPR, the Company informs the Customer of any planned change involving the addition or replacement of a sub-processor, and gives the Customer the opportunity to object.

10.3 Guarantee of No Training by Third-Party AI

Essential security guarantee: the Company contractually undertakes to configure the access gateways and APIs with the Third-Party AI Providers on a strictly commercial basis, so as to ensure that neither the Customer Content, nor the prompts, nor the personal data of the Customer's end users are used by these third-party providers to train, teach or improve their general artificial intelligence models.

10.4 Security Breach Notification

In the event of a security compromise, hacking of the shared server or a data leak linked to the platform's scripts, the Company undertakes to notify the Customer in writing within a maximum of 48 hours of becoming aware of it, so that the Customer can meet its obligation to notify the CNIL within the statutory 72-hour period.

Article 11: LCEN Regime (Content Alerts)

11.1 Passive Host Status

In accordance with article 6 of the French Law on Confidence in the Digital Economy (LCEN), the Company acts as a technical storage provider for content published on the Generated Application. It carries out no general monitoring, no moderation, and no editorial control over the Customer's activity or commercial transactions.

11.2 Notification and Prompt Removal Procedure

  • Notification: The Company provides on its website a reporting form, at kubbler.com/report, allowing any third party to report illegal content to it.
  • Prompt Removal: Upon receipt of a valid and reasoned notification reporting manifestly illegal content (infringement, copyright violation, hate speech, fraud) installed by the Customer, the Company will promptly remove the disputed content or suspend access to the Generated Application, without notice and without the Customer being able to hold the Company contractually liable for this legitimate cut-off.

Article 12: End of Contract, Reversibility and Destruction

12.1 Selective Reversibility Obligation (Return of Data)

On expiry of the contractual relationship or following termination of the subscription by either Party, the Customer has a right to retrieve their data.

  • Scope of return: The Company undertakes, for a maximum of 30 days following the effective date of termination, to return to the Customer all of their Customer Content and the raw state of their Databases in a standard, usable and clean format (JSON for databases, original format for files).
  • Absolute Exclusion of Proprietary Source Code: The reversibility obligation covers exclusively the raw data and content entered by the Customer. It applies in no event to the Company's Scaffold, the source code of the software infrastructure, proprietary mock-ups, automation scripts or AI connectors (Third-Party AI Providers or SharedEnv), which remain the exclusive industrial and intellectual property of the Company. The Customer may in no event demand transfer of the executable or source computer code of the platform.

12.2 Secure Destruction Obligation

On expiry of the reversibility period mentioned above, and in order to comply with GDPR requirements, the Company will carry out a complete, definitive and secure purge of all data, files and backups linked to the Customer's account across the whole pooled infrastructure. No copy will be kept.

Article 13: Limitation of Liability

13.1 Overall Contractual Financial Cap IF THE COMPANY'S LIABILITY WERE TO BE ESTABLISHED BY A FRENCH COURT IN CONNECTION WITH THE PERFORMANCE OF THE SERVICES (CONFIGURATION BUG, APPLICATION UNAVAILABILITY, SOFTWARE FLAW), THE TOTAL CUMULATIVE AMOUNT OF DAMAGES AND ANY COMPENSATORY INDEMNITY TO WHICH THE CUSTOMER MAY BE ENTITLED SHALL BE CAPPED AT THE AMOUNT OF THE SUMS ACTUALLY RECEIVED BY THE COMPANY FOR THE SERVICES DURING THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO LIABILITY.

13.2 Exclusion of Indirect Commercial Losses

In no event shall the Company be required to compensate indirect or consequential losses suffered by the Customer or its end users. The following are expressly excluded from any right to compensation: loss of revenue, loss of commercial profit, loss of operations or productivity, loss of data within the databases (outside the backup scope), loss of customers, or damage to reputation and brand image.

13.3 Limits

The exclusions and caps in this article do not apply in the event of gross negligence or wilful misconduct, personal injury, or breach of an essential obligation of the contract to the extent that this would deprive that obligation of its substance. They apply without prejudice to the rights that a Customer who is a consumer holds under the mandatory provisions of the Consumer Code.

Article 14: Governing Law and Jurisdiction

These Terms are governed exclusively by French law.

ANY DISPUTE RELATING TO THE INTERPRETATION, VALIDITY OR PERFORMANCE OF THESE TERMS, FAILING AMICABLE RESOLUTION BETWEEN THE PARTIES, SHALL BE SUBMITTED TO THE EXCLUSIVE JURISDICTION OF THE COMMERCIAL COURT OF NANTERRE, EVEN IN THE EVENT OF SUMMARY PROCEEDINGS, THIRD-PARTY WARRANTY CLAIMS OR MULTIPLE DEFENDANTS.

Kubbler

Describe it once. Kubbler assembles a production-ready product from the Async Code foundation: then ships it live.

ProductHow it worksPricingBlock catalogueHumans x AI
Use casesShop / TradeMarketing / CommunicationsCoach / TrainerFreelancer / IndependentFounder / StartupDeveloper / CTOAgency / StudioInternal team toolCreator using AIProduct manager / DesignerIT leaders / CIO
CompanyAbout Async CodeContact
AccountSign inGet started
© 2026 Kubbler. Built by Async Code.
PrivacyLegal noticeTerms of UseTerms of SaleDPAReport a siteReport a bug