Privacy Policy

Dassang SAS ("we") takes the protection of your personal data seriously. This policy explains what data we collect, why, and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and applicable French data protection law.

Data controller

The data controller is Dassang SAS, 17 Rue Cassiopée, 74650 Chavanod, France, ⟦TO COMPLETE: contact e-mail⟧.

⟦TO COMPLETE if applicable: contact details of the Data Protection Officer (DPO).⟧

Data we collect

  • Account data: e-mail address, password (hashed), username.
  • Sign-in with Google: if you sign in with Google, Google only sends us the identifier of your Google account and your e-mail address, which we keep.
  • Sign-in with Facebook: if you sign in with Facebook, Facebook sends us the identifier of your Facebook account and your e-mail address, which we keep. Facebook's consent screen also lists your name and profile picture: we neither read nor keep them.
  • Profile data: information you choose to add (picture, description, preferences).
  • Content: patterns, projects, images and other content you create or upload.
  • Payment data: processed by our provider Stripe; we do not store your card numbers.
  • Usage data: interactions with the assistant, technical logs, connection data.
  • Providing and managing your account and the service — performance of the contract.
  • Processing payments and sales — performance of the contract.
  • Ensuring security and preventing fraud — legitimate interest.
  • Improving the service and providing support — legitimate interest.
  • Sending you service-related communications — performance of the contract; marketing communications — consent.
  • Complying with our legal and accounting obligations — legal obligation.

Recipients and processors

Your data may be processed by our processors, including:

  • Microsoft Azure — hosting. ⟦TO VERIFY: hosting region⟧
  • Stripe — payment processing.
  • Google — sign-in with Google, only if you choose it; Google acts there as the controller of your Google account.
  • Meta (Facebook) — sign-in with Facebook, only if you choose it; Meta Platforms Ireland Limited acts there as the controller of your Facebook account.
  • ⟦TO COMPLETE: e-mail provider⟧ — sending transactional e-mails.
  • ⟦TO COMPLETE: AI/LLM provider⟧ — assistant features.

We do not sell your personal data.

Transfers outside the European Union

Some processors may process data outside the European Union. In that case, such transfers are governed by appropriate safeguards (European Commission standard contractual clauses). ⟦TO VERIFY depending on the providers used⟧

Signing in with Google involves Google LLC, in the United States, certified under the EU-U.S. Data Privacy Framework. ⟦TO VERIFY⟧

Signing in with Facebook involves Meta Platforms, Inc., in the United States, certified under the same framework. ⟦TO VERIFY⟧

Retention period

We retain your data for as long as your account is active, then for the periods required to meet our legal obligations, in particular accounting obligations. ⟦TO COMPLETE: specific periods⟧

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability of your data. You can exercise these rights at ⟦TO COMPLETE: contact e-mail⟧.

To delete your account and your data, open "Manage account" › Profile, click "Delete my account" and follow the confirmation link sent to you by e-mail. Deleting it also removes the link between your account and Google or Facebook.

You may also lodge a complaint with the CNIL (www.cnil.fr).

Cookies

The site only uses cookies that are strictly necessary for its operation (authentication and security). These cookies do not require your consent. No advertising or audience-measurement cookie is stored on your device.

Changes

We may update this policy. Any substantial change will be notified to you.

Contact

For any question regarding your personal data: ⟦TO COMPLETE: contact e-mail⟧.