Privacy policy

Data controller

Gabin Durand (Vaxel), 153 rue du Siffet, 38138 Les Côtes-d'Arey, France. Contact: contact@vaxel.fr.

Data processed and purposes

Account: email address, display name, account identifier. Purpose: account creation and management, authentication. Legal basis: performance of the contract.

Subscription: plan, billing history, technical payment identifiers. Purpose: subscription and billing management. Legal basis: performance of the contract and accounting obligations. No card details are stored by the publisher: they are handled directly by Stripe.

Usage: tracks downloaded, quota consumed, submissions made. Purpose: quota enforcement, history display. Legal basis: performance of the contract.

Traffic: IP address, visit count, downloads. Purpose: audience measurement and security. Legal basis: legitimate interest.

Language: on sign-up, the IP address is sent to the ip-api.com service in order to determine the country and send the welcome message in the right language. That service retains no data beyond its response.

Recipients

Stripe Payments Europe, Ltd. (Ireland) for payment. Google Firebase / Google Ireland Limited (Ireland) for authentication and profile storage. Resend for email delivery. These providers may carry out transfers outside the European Union governed by the European Commission's standard contractual clauses.

No data is sold or shared for advertising purposes.

Retention periods

Account and usage data: for the life of the account, then twelve months after deletion. Billing data: ten years, in line with accounting obligations. Traffic data: twenty-five months.

Cookies and local storage

The site uses no advertising cookies and no third-party analytics. Browser local storage keeps the chosen language, the currency and the authentication session — strictly necessary to operate the service, they require no prior consent.

Your rights

You have rights of access, rectification, erasure, restriction, objection and portability. Exercise them at contact@vaxel.fr, with proof of identity where there is doubt.

Should a disagreement persist, a complaint may be lodged with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris — cnil.fr.