Privacy Policy
Last updated: 2026-11-05
1. Controller
Rajichan ANANTHARAJAH, 3 Rue des Aulnes, 93600 Aulnay-sous-Bois, France. Contact: contact@example.com.
2. Data we collect
- Account: email address, name if provided, account identifiers.
- Authentication: session data (IP address, user agent, expiry) and one-time sign-in tokens.
- Billing: Stripe customer ID, subscription status. Card data is handled only by Stripe.
- Technical: server logs needed to operate and secure the Service.
3. Why and legal basis (GDPR)
- Provide the Service and sign you in — contract.
- Process payments and keep accounting records — contract and legal obligation.
- Security and fraud prevention — legitimate interest.
4. Processors
- MongoDB Atlas — Database hosting
- Resend — Transactional email (sign-in links)
- Stripe — Payment processing
Some processors are located outside the EEA; transfers rely on adequacy decisions or Standard Contractual Clauses.
5. Retention
Account data is kept while your account is active and deleted on request or after prolonged inactivity. Invoices and payment records are kept for the period required by law (e.g. 10 years in France). Expired sign-in tokens and sessions are removed automatically.
6. Your rights
You may access, rectify, erase, restrict, port or object to the processing of your data, and withdraw consent at any time, by emailing contact@example.com. You may also lodge a complaint with your data protection authority (in France: CNIL, cnil.fr).
7. Cookies
See our Cookie Policy.
8. Security and children
We use industry-standard measures (HTTPS, hashed/expiring tokens, access controls). The Service is not directed to children under 16.
9. Changes
We will update this page and its date when this policy changes.
