Privacy policy

What we collect

• Your email address, to sign you in and write to you about your purchases and sales.
• For sellers: shop name, username, bio, products, files, and the ideas and drafts written with AI.
• Your purchases and subscriptions, your reviews and your reports.
• Technical data (IP address, browser), kept in our providers' logs for security.

We never see your card number: Stripe takes and stores it.

Why

• To run your account, your purchases and your sales (performing our contract with you).
• To keep our accounts and meet our legal obligations.
• To protect the site against fraud and abuse, and to count visits anonymously (legitimate interest).

We don't sell your data or use it for advertising.

Who processes it for us

• Supabase: database, sign-in and file storage.
• Stripe: payments, and seller identity checks and payouts.
• Vercel: hosting and anonymous visit statistics.
• Resend: sending emails.
• Vercel AI Gateway and the AI model provider (currently OpenAI): only what you write to generate a draft.

Some of these providers are outside the European Union, notably in the United States. These transfers are covered by the safeguards the GDPR provides for (standard contractual clauses or the Data Privacy Framework).

Cookies

We use only two cookies the site needs to work: one keeps you signed in, the other remembers your language. Visit statistics don't use cookies, so there's nothing to accept.

How long we keep it

For as long as your account exists. Purchase and sale records are kept as long as accounting law requires, even after an account is deleted. Files nothing uses any more are deleted automatically after a week.

Your rights

You can ask to see your data, correct it, delete it, get a copy in a reusable format, or object to its use. Write to [to fill in]; we reply within a month. You can also complain to your data protection authority (in France, the CNIL at cnil.fr).