Privacy Policy

1. Data controller

2. Personal data collected

2.1 Registration data

When creating your account:

• First and last name
• Email address
• Password (stored encrypted)
• Agency name
• Phone number (optional)

2.2 Usage data

When using the Platform:

• Information about your clients and their WordPress sites
• Support tickets and comments
• Recorded work time
• Created projects and tasks
• Uploaded files and media
• Settings and preferences

2.3 Technical data

Collected automatically:

• IP address
• Browser type and version
• Operating system
• Pages visited and actions performed
• Connection date and time
• Activity logs for security

2.4 Billing data

• Billing information (name, address)
• Bank details (processed by our secure provider)
• Transaction history

3. Purpose of processing

We use your data for:

3.1 Service provision

Create and manage your account, give you access to features, store your data.

3.2 Communication

Send notifications, security alerts, service updates, respond to your requests.

3.3 Billing

Process your payments, manage your subscription, issue invoices.

3.4 Service improvement

Analyze usage to improve our services and develop new features.

3.5 Security

Detect and prevent fraud, abuse and violations. Ensure Platform security.

3.6 Legal obligations

Comply with our legal and regulatory obligations (accounting, taxation, etc.).

4. Legal basis for processing

• Contract performance: provision of subscribed service
• Legitimate interest: service improvement, fraud prevention
• Consent: marketing communications (opt-in)
• Legal obligations: compliance with legislation

5. Data sharing

We never sell your personal data.

5.1 Service providers

We use trusted service providers for:

• Data hosting (secure servers in France)
• Payment processing (PCI-DSS certified provider)
• Sending transactional emails
• Customer support

These providers are bound by confidentiality agreements.

5.2 Legal obligations

We may disclose your data if required by law (court order, competent authorities).

5.3 Transfers outside EU

Your data is hosted and processed exclusively within the European Union. We do not transfer your data outside the EU.

6. Retention period

• Account data: duration of subscription + 3 months after termination
• Billing data: 10 years (legal obligation)
• Security logs: 12 months
• Support data: 3 years after last interaction

At the end of these periods, your data is securely deleted.

7. Your rights

In accordance with GDPR, you have the following rights:

How to exercise your rights?

If you believe your rights are not being respected, you can file a complaint with the CNIL: www.cnil.fr

8. Data security

We implement technical and organizational security measures:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure authentication and access management
• Daily automatic backups
• Intrusion monitoring and detection
• Regular team training
• Regular security testing and audits

In case of a data breach likely to result in a high risk, we will inform you as soon as possible.

9. Cookies and similar technologies

We use:

• Essential cookies: necessary for operation (authentication, security)
• Preference cookies: remember your choices (language, theme)
• Analytics cookies: understand Platform usage (with your consent)

You can manage your cookie preferences in your account or via your browser.

10. Minors' data

The Platform is intended for professionals and is not designed for persons under 18 years old. We do not knowingly collect data concerning minors.

11. Policy modifications

We may modify this Policy at any time. In case of substantial modification, we will inform you by email and/or notification at least 30 days before it takes effect.

Continued use of the Platform after it takes effect constitutes your acceptance.

12. Contact

For any question concerning this Policy or the processing of your data: