Privacy Policy

2. Types of Data Collected

We collect data necessary to provide, secure, administer, and improve our service. Optional analytics data is collected only after the User has given consent. This includes:

• Identity Data: First name, last name, email address (via Supabase Auth).
• Financial Data: Payment history, subscription status, and billing country. Note: We do not store full credit card numbers. Payments are processed securely by Stripe.
• Technical Data: IP address, browser type, device information, and login timestamps (via Vercel and Supabase logs) for security purposes.
• Usage and Analytics Data: Pages viewed, Website interactions, referral source, approximate geographical area, browser information, device information, and analytics identifiers. This information is collected through Google Analytics only after the User has accepted optional analytics trackers.
• Form and Communications Data: Information submitted through contact forms, beta applications, feedback surveys, newsletter preferences, referral invitations, and support communications.

3. Mode and Place of Processing

Methods of Processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. The Data processing is carried out using computers and/or IT-enabled tools, including services provided by Supabase, Stripe, Vercel, Resend, and Google Analytics, following organizational procedures strictly related to the purposes indicated.

Legal Basis of Processing

We process your data under the following legal bases (GDPR Art. 6):

• Contractual Necessity: To provide the Pro Membership, allow you to download PDFs, and manage your account.
• Legal Obligation: To comply with French tax laws (retention of invoices).
• Legitimate Interest: To prevent fraud, ensure website security, respond to service-related enquiries, and fix technical errors.
• Consent: To use optional analytics trackers and, where applicable, to send newsletters or other optional communications. Consent may be withdrawn at any time.

4. Third-Party Service Providers

We do not sell your data. We share data only with the following infrastructure providers necessary to run the Service:

5. Retention Time

Unless specified otherwise, Personal Data shall be processed and stored for as long as required by the purpose they have been collected for:

• Account Data: Stored for the duration of your subscription plus 3 years after your last activity (in accordance with CNIL recommendations).
• Billing Data: Stored for 10 years to comply with French Accounting Law (Code de Commerce).
• Analytics Data: User-level and event-level Google Analytics data is retained for up to 14 months according to the retention settings applied to our Analytics property.
• Cookie and Tracker Preferences: The User's acceptance or refusal of optional analytics trackers is stored in their browser for approximately six months.
• Form and Communications Data: Contact messages, beta applications, feedback, referral information, and related communications are retained only for as long as reasonably necessary to respond, administer the relevant service, and comply with applicable legal obligations.

6. Your Rights (GDPR)

Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users have the right to:

• Withdraw their consent at any time.
• Access their Data. Users have the right to learn if Data is being processed by the Owner and obtain a copy.
• Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated.
• Restrict processing. Users may request that the processing of their Personal Data be limited in certain circumstances.
• Object to processing. Users may object to processing based on legitimate interests in certain circumstances.
• Data portability. Users may request Personal Data they have provided in a structured, commonly used, and machine-readable format where applicable.
• Have their Personal Data deleted (Right to be Forgotten).
• Lodge a complaint with the competent data protection authority (in France: the CNIL).

7. Cookie and Tracker Policy

This Website uses strictly necessary trackers and, only with the User's consent, optional analytics trackers.

Essential Trackers: We use authentication cookies provided by Supabase to maintain secure login sessions and keep Users signed in. We also store the User's analytics preference in their browser so that the Website remembers whether analytics were accepted or rejected. These trackers are necessary for the Website's operation or for remembering the User's privacy choice and do not require consent.

Google Analytics: After the User selects “Accept analytics,” Google Analytics may use cookies such as _ga and _ga_* to distinguish visits and produce statistics about Website traffic and usage. This may include information about pages viewed, interactions, referral sources, browser and device type, and approximate geographical area.

Google Analytics remains disabled unless the User gives consent. Refusing analytics does not restrict access to the Website or its services.

The User's choice is remembered for approximately six months. Consent may be changed or withdrawn at any time by selecting Cookie settings in the Website footer. When analytics consent is withdrawn, the Website disables Google Analytics and attempts to remove the Google Analytics cookies it can identify.

We do not use third-party advertising cookies, retargeting pixels (such as Facebook Pixel), or behavioural advertising trackers.

8. International Transfers

Some of our service providers, including Supabase, Stripe, Vercel, Resend, and Google, may process Personal Data outside France or the European Economic Area, depending on the provider and the relevant service configuration. Where an international transfer occurs, we rely on appropriate safeguards required by applicable data-protection law, which may include an adequacy decision, participation in an approved data-protection framework, or Standard Contractual Clauses.