GDPR
Privacy policy
Last updated: May 21, 2026.
Data controller
[Company name], whose contact details are listed in the mentions légales, is responsible for processing personal data collected through this service.
For any question about your data : dpo@example.com.
Data collected
We only collect the data required to provide the service :
- Identity and contact : customer account email address.
- Authentication : password hash, session tokens, one-time tokens for email verification and reset.
- Subscription : Stripe customer ID, subscription ID, subscribed plan, status and period dates.
- Print activity : technical machine identifiers (Machine ID, Serial ID), number of reserved pages, timestamp and status of each print job. No document content is transmitted or stored.
- Security : IP address at login or reset attempts, for rate limiting.
- Administrative log : technical events (Stripe payments, anomalies, support operations).
Purposes and legal basis
- Performance of the contract : provide the service, manage the subscription, count prints.
- Legal obligation : retain accounting records related to billing.
- Legitimate interest : prevent fraud (signed print authorizations), ensure security (rate limiting, administrative logging).
Recipients
Your data is accessible to :
- Authorized staff of [Company name], within the scope of their duties.
- Stripe, payment provider, for subscription processing (non-EU transfers governed by standard contractual clauses).
- [Hosting provider name], service hosting provider.
No data is sold or transferred to third parties for commercial purposes.
Retention period
- Customer account : throughout the contractual relationship, then 3 years from the last contact.
- Billing data : 10 years (legal obligation).
- Print log : 3 years to allow anti-fraud checks.
- Security logs (IP, rate limiting) : 12 months maximum.
Your rights
Under the GDPR, you have the following rights :
- Access, rectification and erasure of your data.
- Restriction of and objection to processing.
- Data portability.
- Define instructions for your data after your death.
To exercise these rights, write to dpo@example.com. You may also lodge a complaint with the CNIL.
Cookies
The service only uses a session cookie strictly necessary for authentication. No analytics or advertising cookies are placed.