Privacy policy

[À COMPLÉTER — raison sociale ou nom de l’entrepreneur], [À COMPLÉTER — adresse du siège social] — saymonlegacypromo@gmail.com.

Account: name, email address, password (stored hashed, never in plain text). Signup profile: experience level and goal declared during onboarding. Usage: lesson progress, owned courses. Orders: purchase and billing history — card data is processed exclusively by Stripe and never passes through our servers. Technical: connection logs and essential cookies (see Cookie Policy).

Providing the member area and courses: performance of the contract. Invoicing and accounting: legal obligation. Responding to contact requests: legitimate interest. Sending news and offers: consent, withdrawable at any time via the unsubscribe link or by email.

Data is accessible only to the controller and its technical processors: Supabase (database and authentication), Stripe (payments), Vercel (site hosting), Loom (course video streaming). No data is sold or rented to third parties.

Some processors are established in the United States. Transfers are governed by the European Commission’s standard contractual clauses and, where applicable, the Data Privacy Framework.

Account data: for the life of the account, then deleted within 30 days of a closure request. Billing data: 10 years (accounting obligation). Marketing emails: until consent is withdrawn or 3 years after last contact. Technical logs: 12 months maximum.

You have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights: saymonlegacypromo@gmail.com (response within one month). You may also lodge a complaint with the CNIL: www.cnil.fr.

Data is protected by encryption in transit (HTTPS), password hashing and row-level security (RLS) in the database. The services are restricted to adults; minors must not create an account.

The French version of this document is authoritative. The English translation is provided for convenience only.