Privacy policy

Article 1. Purpose

This policy informs users of the Trichos website (the "User") of how their personal data is collected and processed, in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, the "GDPR") and French Law No. 78-17 of 6 January 1978 on data processing, data files and individual liberties.

Article 2. Data controller

The data controller is the publisher of the Site, a private individual acting in a non-professional capacity, identified in the legal notice (the "Publisher"). They can be contacted at: trichos.support@gmail.com.

Article 3. Data collected

The Publisher only collects the data the User voluntarily enters: their email address in the beta sign-up form and, if they use the contact form, their email address and the content of their message. No other personal data is requested.

Article 4. Purposes and legal basis

The email address is used exclusively to send the User their access to the beta version of the Trichos app, then, at most, two messages when the app launches, one of which is a free offer.

This processing is based on the User's consent (Article 6.1.a of the GDPR), given when submitting the form, which states how the address will be used. The User may withdraw their consent at any time, using the unsubscribe link included in every message or by writing to the Publisher.

The email address and message sent through the contact form are used solely to reply to the User. This processing is based on the Publisher's legitimate interest in answering the requests addressed to them (Article 6.1.f of the GDPR).

Article 5. Retention period

The email address is kept until the User unsubscribes and, at the latest, for one year from the app's public launch. It is then deleted.

Messages received through the contact form are kept for as long as needed to handle the request, and at most one year after the last exchange.

Article 6. Recipients

The data is intended for the Publisher alone. It is never sold, rented or transferred to third parties.

To send messages, the Publisher uses Brevo (Sendinblue SAS, France), acting as a processor and hosting the data within the European Union.

Messages from the contact form are delivered by Brevo to the Publisher's inbox, hosted by Google (Gmail).

Article 7. Hosting and transfers outside the European Union

The Site is hosted by Vercel Inc., based in the United States. As part of this service, Vercel keeps technical logs (IP address, date and time of connection, pages visited) needed for the security and proper operation of the Site. These transfers are covered by the safeguards provided for by the GDPR, in particular the standard contractual clauses adopted by the European Commission.

Messages from the contact form are received in a Gmail inbox, a service of Google LLC, based in the United States. This transfer is covered by the same safeguards.

Article 8. Audience measurement

To assess traffic to the Site, the Publisher uses Umami, configured to produce strictly anonymous statistics (number of visits, pages viewed, number of sign-ups and of clicks to the Telegram group). This tool sets no cookie and collects no data that could identify the User. In line with the recommendations of the CNIL (the French data protection authority), this audience measurement is exempt from consent.

Article 9. Cookies

The Site sets a single cookie, NEXT_LOCALE, which remembers the display language (French or English) for the duration of the visit. Strictly necessary for this choice, it contains no personal data and is exempt from consent.

No advertising, tracking or audience measurement cookie is used.

Article 10. Security

The Publisher implements appropriate technical and organisational measures to protect the data against any loss, alteration or unauthorised access. Communications with the Site are encrypted (HTTPS) and access to the services used is protected.

Article 11. User rights

Under the applicable regulations, the User has the right to access, rectify, erase, restrict and port their data, as well as the right to object to its processing and to withdraw their consent at any time.

These rights can be exercised by writing to trichos.support@gmail.com. A response will be provided within one month of receipt of the request.

If, after contacting the Publisher, the User considers that their rights have not been respected, they may lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr.

Article 12. Changes to this policy

The Publisher reserves the right to amend this policy at any time, in particular to comply with any regulatory change. The date of the last update appears at the top of this page.