Data controller
Data collected
We only collect data necessary for our service to function:
Identification data
Name, surname, email address, company name
Connection data
IP address, connection logs, browser type
Usage data
Analyzed sites, scan results, generated documents
Payment data
Processed by Stripe (we do not store your bank details)
Purposes and legal bases
Your data is processed for the following purposes:
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Contract performance (Art. 6.1.b) |
| Providing GDPR analysis service | Contract performance (Art. 6.1.b) |
| Payment and billing management | Legal obligation (Art. 6.1.c) |
| Improving our services | Legitimate interest (Art. 6.1.f) |
| Commercial communication | Consent (Art. 6.1.a) |
Retention periods
Your data is retained for the following periods:
Data recipients
Technical and support team only
Upon legal request only
Transfers outside the European Union
Some of our subcontractors (Cloudflare, Stripe) may process data in the United States. These transfers are governed by:
Your rights
In accordance with the GDPR, you have the following rights over your personal data:
Right of access
Obtain a copy of your data (Art. 15)
Right to rectification
Correct inaccurate data (Art. 16)
Right to erasure
Request deletion (Art. 17)
Right to restriction
Limit processing (Art. 18)
Right to portability
Retrieve your data (Art. 20)
Right to object
Object to processing (Art. 21)
To exercise your rights: [email protected]
You can also export or delete your data from the Settings page of your account.
Data security
We implement the following security measures:
Complaint
If you believe that the processing of your personal data constitutes a violation of the GDPR, you have the right to lodge a complaint with the CNIL.
Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy, TSA 80715 - 75334 Paris Cedex 07
www.cnil.fr