Privacy Policy

2. Types of Data Collected

We collect only the data strictly necessary to provide our service. This includes:

• Identity Data: First name, last name, email address (via Supabase Auth).
• Financial Data: Payment history, subscription status, and billing country. Note: We do not store full credit card numbers. Payments are processed securely by Stripe.
• Technical Data: IP address, browser type, device information, and login timestamps (via Vercel and Supabase logs) for security purposes.

3. Mode and Place of Processing

Methods of Processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data processing is carried out using computers and/or IT-enabled tools (specifically Supabase and Stripe databases), following organizational procedures strictly related to the purposes indicated.

Legal Basis of Processing

We process your data under the following legal bases (GDPR Art. 6):

• Contractual Necessity: To provide the Pro Membership, allow you to download PDFs, and manage your account.
• Legal Obligation: To comply with French tax laws (retention of invoices).
• Legitimate Interest: To prevent fraud, ensure website security, and fix technical errors.

4. Third-Party Service Providers

We do not sell your data. We share data only with the following infrastructure providers necessary to run the Service:

5. Retention Time

Unless specified otherwise, Personal Data shall be processed and stored for as long as required by the purpose they have been collected for:

• Account Data: Stored for the duration of your subscription plus 3 years after your last activity (in accordance with CNIL recommendations).
• Billing Data: Stored for 10 years to comply with French Accounting Law (Code de Commerce).

6. Your Rights (GDPR)

Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users have the right to:

• Withdraw their consent at any time.
• Access their Data. Users have the right to learn if Data is being processed by the Owner and obtain a copy.
• Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated.
• Have their Personal Data deleted (Right to be Forgotten).
• Lodge a complaint with the competent data protection authority (in France: the CNIL).

7. Cookie Policy

This Website uses Trackers (Cookies) strictly for technical purposes.

Essential Cookies: We use cookies provided by Supabase to maintain your authenticated session (keeping you logged in). According to CNIL guidelines, these cookies are strictly necessary for the service and do not require user consent.

We do not use third-party advertising cookies, retargeting pixels (such as Facebook Pixel), or marketing trackers.

8. International Transfer

Your data is processed in France, but may be stored on servers provided by our vendors (Supabase, Stripe) located in the United States. These transfers are covered by Standard Contractual Clauses (SCCs) to ensure GDPR compliance.