Privacy policy

Who we are

Privacyboard 3 Ter Avenue Jeanne d'Arc, 94170, Le Perreux https://privacyboard.io/ Privacy contact: antoine@unmake.io

Scope

This notice describes processing for which we act as controller. Data processed on behalf of customers is governed by their instructions and the applicable data processing agreement.

Our processing activities

Customer accounts and service delivery Purpose: Create and manage customer accounts and deliver the service the customer asked for Data: Names, email addresses, account identifiers, usage data People: Customers and their users Legal basis: Performance of a contract Retention: For the duration of the contract, then deleted or archived after 12 months Service providers: Vercel, Supabase, Resend

Billing and payments Purpose: Invoice customers, collect payments and keep accounting records Data: Names, billing addresses, invoice details, payment status (card numbers stay with the payment provider) People: Customers and their billing contacts Legal basis: Performance of a contract and legal obligation Retention: As required by accounting and tax law, commonly 6 to 10 years (10 years in France) Service providers: Lemon Squeezy

Where your data comes from

We collect personal data directly from the people concerned and, in some cases, from third parties such as their employer, our partners or public sources.

Recipients and transfers

We use the following service providers, who may receive personal data on our behalf: Vercel (Hosting) — Host business websites, online services or other company systems. — region: US Supabase (Database & authentication) — Provide database, authentication and file storage for enabled Supabase services. — region: France Resend (Email) — Deliver transactional emails such as account notifications and password resets. — region: US GitHub (Development) — Manage source code, software development and deployment workflows. — region: US Lemon Squeezy (Payments) — Manage customer payments, subscriptions where applicable, invoicing and billing. — region: US Google Analytics (Analytics) — Measure website or service usage and understand visitor interactions. — region: US Some of these providers process data outside the European Economic Area (Vercel, Resend, GitHub, Lemon Squeezy, Google Analytics). Where this happens, we rely on standard contractual clauses approved by the European Commission.

Automated decisions

We do not take decisions based solely on automated processing that produce legal or similarly significant effects on you.

Cookies and similar technologies

Our website also uses cookies or similar technologies that are not strictly necessary, for example for preferences, audience measurement or marketing. We ask for your consent before placing them, and you can change or withdraw your choice at any time. The services concerned are listed in our Cookie policy.

Security

We protect personal data with appropriate technical and organizational measures, including multi-factor authentication for administrative access, regular backups, encryption of personal data in transit and at rest.

Your rights

You may ask us for access to your personal data, and for its correction, erasure or restriction. You may also receive your data in a portable format and object to its processing, including for direct marketing. Where processing relies on your consent, you may withdraw it at any time without affecting what was done before. To exercise your rights, contact antoine@unmake.io. We answer within one month, and we may need to verify your identity first. You may also lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés, cnil.fr).

Changes to this notice

We may update this notice. The date of the last review is shown at the top of this page.