Privacy policy

Data controller

[TO COMPLETE: business or personal name], [TO COMPLETE: address]. Contact for any data question or request: [TO COMPLETE: contact email].

Data we process

• Your email address and the content of your message.
• The file you send and/or the download link you provide, with its metadata (name, size, type). These files may contain personal data, including sensitive data, whose content we do not control.
• The case number, status, price and case dates. The access code is stored only in irreversibly hashed form.
• Technical data: IP address and connection logs, used for security and abuse prevention.

Purposes and legal bases

• Examining your file, performing the repair, case tracking and keeping you informed: performance of a contract or pre-contractual steps taken at your request.
• Invoicing and accounting obligations: legal obligation.
• Service security, fraud and abuse prevention: legitimate interest.
• Handling your requests and complaints: legitimate interest.

Recipients and processors

Your data is neither sold nor used for advertising. It is accessible to authorised staff and to our technical providers:

• OVH SAS (server hosting, European Union).
• Cloudflare, Inc. (traffic protection and acceleration; data passes through its network).
• Our email delivery provider, when notifications are enabled.
• The file-sharing service of your choice, if you give us a link.

We may disclose data to authorities where the law requires it.

Transfers outside the European Union

Cloudflare, Inc. is established in the United States. Such transfers rely on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses.

Retention

• Submitted files, previews, repaired files and download links: deleted 30 days after the case is closed (repair delivered or failure confirmed).
• Case never closed: fully deleted 90 days after the last activity.
• Case record (email address, message, status): deleted 12 months after closure.
• Accounting records: 10 years (legal obligation).
• Technical logs (IP address): 12 months at most.

You can request early deletion of your case at any time.

Security

Encrypted connection (HTTPS), files stored outside the public directory, case tracking protected by a secret code, administrator access by secret key, upload rate limiting. No measure guarantees absolute security; if a data breach poses a risk to you, we will inform you as required by law.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. To exercise them, write to [TO COMPLETE: contact email] quoting your case number; proof of identity may be requested if in doubt. We reply within one month.

You may lodge a complaint with the CNIL (www.cnil.fr) or your local data protection authority.

Cookies and local storage

The website uses no advertising cookies and no audience-measurement tools. To save you retyping your case credentials, your browser may keep them in the tab’s session storage; they disappear when the tab is closed. Cloudflare may set strictly necessary security cookies.

Minors

The service is intended for adults. Minors must not use it without the consent of their legal representative.

Changes

We may update this policy; the update date appears at the bottom of the page.