Privacy Policy
Last updated : September 24, 2026
1. Data Controller
2. Purposes of Processing and Legal Bases
Your personal data is processed for the following purposes:
- Order and invoice management (legal basis: performance of contract, Art. 6.1.b GDPR)
- Commercial prospecting by email (legal basis: consent, Art. 6.1.a GDPR)
- Anonymous audience statistics (legal basis: legitimate interest, Art. 6.1.f GDPR)
3. Categories of Data Collected
- Identification data: name, first name, email, postal address
- Connection data: IP address, session identifiers
- Payment data (processed by our provider Stripe)
4. Data Recipients
Your data is accessible to our internal services (sales, support) as well as our subprocessors: hosting provider (IONOS SARL). All subprocessors are bound by a contract compliant with Article 28 of the GDPR.
5. Retention Periods
- Customer data: 3 years after the end of the commercial relationship
- Prospecting data: 3 years from the last contact
- Accounting data: 10 years (legal obligation)
6. Your Rights
You have the following rights at any time: access, rectification, erasure, restriction, portability, objection.
You also have the right to lodge a complaint with the CNIL (3 place de Fontenoy, 75007 Paris — www.cnil.fr).
7. Cookies
Our site uses cookies. For more information, see our dedicated cookie policy.
8. Google Ads data (advertising feature)
If you connect a Google Ads account, we access only the campaigns created through Adrefyn and their statistics (impressions, clicks, cost, conversions, approval status), in order to run these campaigns and suggest variants.
The authorization token is stored encrypted on our servers and is never exposed to the browser. You can revoke it at any time from Settings > Integrations; the token is then deleted.
Google user data is used only to provide this feature. It is never sold, never used for advertising and never used to train general AI models.