Draft — this page must be reviewed by a lawyer before launch.
Privacy policy
Controller: [name], [email].
Data we keep: your email address, a hash of your password (never the password itself), login sessions, and your subscription status. Payments are handled by Stripe; we never see your card details.
Why: to provide your account and subscription (contract) and to keep the service secure (legitimate interest).
Processors: Stripe (payments), our email provider, our hosting provider.
Retention: as long as your account exists; invoices as required by law.
Your rights: access, correction, deletion (delete your account from the account page), portability, objection. Contact us, or complain to your data protection authority (CNIL in France).
Cookies: only strictly necessary cookies (session, security). No advertising or tracking cookies.