Privacy policy

Who is responsible

The data controller is Benjamin Guichard, sole proprietorship, see the legal notice. Contact: benjaminguichardpro@gmail.com.

Data we collect

• Account: your email address. You sign in with a link sent by email; there is no password.
• Your context: what you tell us about your business and goals (offer, stage, role, goal, constraints, weekly hours).
• Your analyses: the YouTube links you submit, the video title and channel, the transcript, the points extracted, and the adaptations, plans, actions and check-ins you create.
• Billing: payments are handled by Stripe. We keep an identifier of your Stripe customer and subscription, your plan and its status. We never see or store your card number.
• Usage: the number of analyses you run each month, to apply your plan’s limit.
• Messages: what you send us by email or through the contact form.

Why we use it, and on what basis

• To provide the service you asked for, including sign-in emails and the day-7 check-in reminder (performance of the contract).
• To bill you and keep accounting records (legal obligation).
• To secure the service and prevent abuse (legitimate interest).
• To answer your messages (contract, or legitimate interest).

We do not send marketing emails, and we do not sell your data.

Who receives your data

We use these service providers, who process data on our behalf:

• Supabase: database and authentication.
• Vercel: hosting of the site and the app.
• OpenAI: the AI that analyzes transcripts and writes adaptations and plans. Your transcript and context are sent to it for that purpose.
• Supadata: retrieval of YouTube transcripts. The video link is sent to it.
• Stripe: payments and subscription management.
• Resend: sending of emails.

Some of these providers are located outside the European Union, notably in the United States. Where that is the case, transfers rely on the safeguards the provider offers, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. According to OpenAI’s API terms, data sent through its API is not used to train its models by default.

How long we keep it

• Your account data is kept until you delete your account. In the app, open the account menu and choose “Delete account”: your profile, analyses, plans, actions and check-ins are erased and your subscription is ended.
• Invoices and payment records are kept as long as accounting law requires (generally 10 years).
• Messages you send us are kept as long as needed to deal with your request.

Your rights

You can ask for access to your data, correction, deletion, restriction, a portable copy, and you can object to certain uses. You can also give instructions about your data after your death. Write to benjaminguichardpro@gmail.com; we answer within one month. If you think your rights are not respected, you can complain to the French data protection authority, the CNIL (cnil.fr).

Cookies and similar storage

We only use what is strictly necessary: a session cookie that keeps you signed in, and your light/dark preference stored in your browser. These do not require your consent. We use no advertising or analytics trackers. The payment pages hosted by Stripe set their own cookies, under Stripe’s policy.

Security

The connection is encrypted (HTTPS) and each account’s data is isolated at the database level, so that you can only read your own.

Changes

We may update this policy; the date at the top shows the latest version. For important changes we will tell you in the app or by email.