DRAFT: operator details still to be completed

Privacy notice

The controller name, address, contact and effective date must be completed before this notice is published.

What we process

Your email address and a salted password hash; your workspace settings; site and form URLs and permission records; check results with timestamps, reasons and incident acknowledgements; billing status (the card details stay with Stripe and never reach us). The runner on your own host keeps mailbox credentials locally and sends us only the technical result.

Why and on what basis

To provide the monitoring you asked for (contract), to secure accounts and prevent abuse (legitimate interest), to send incident, recovery and account emails (contract), and to keep payment records (legal obligation).

Who receives data

Cloudflare hosts the application and database. Resend sends our emails. Stripe processes payments. Optional AI analysis sends only technical status categories to OpenAI, never names, URLs, email contents or credentials, and only when you request it. These providers may process data outside the EU under standard contractual safeguards.

Retention

Account and monitoring records are kept while your account exists. Records are exported or deleted on request to the contact above (there is no self-service deletion yet). Payment records are kept as long as the law requires.

Your rights

You can ask for access, correction, export, deletion, restriction or objection, and you may complain to your data protection authority (in France, the CNIL).