This policy explains what personal data we collect when you use Codanalyst, why, how long we keep it and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data controller
The data controller is To be completed : company name, whose registered office is located at To be completed : registered office. For any question about your data, write to us at contact@codanalyst.tech.
The data we collect
- Account data: name, email address, password (never stored in plain text) and chosen plan.
- Service usage data: addresses of the websites you analyze, results and history of your audits.
- Billing data: information required to issue invoices. Card details are processed directly by our payment provider and are never sent to us.
- Technical data: IP address, browser type and connection logs, used to keep the service secure.
- Your messages: the content of your exchanges with us.
We do not collect any sensitive data within the meaning of the GDPR.
Why we use it
- To provide the service (account creation, audits, reports): performance of the contract.
- To bill your subscriptions: legal obligation.
- To keep the service secure and prevent abuse: legitimate interest.
- To answer your requests: legitimate interest.
- To tell you about product updates: consent, which you can withdraw at any time using the link included in every email.
How long we keep it
- Account and audits: for as long as you use the service. They are deleted when the account is closed, unless the law requires us to keep them.
- Invoices: 10 years, in accordance with accounting obligations.
- Connection logs: 1 year.
- Exchanges with non-customers: 3 years after the last contact.
Who can access it
Your data is only accessible to authorized members of our team and to our technical processors (hosting, email delivery, payment), who act solely on our instructions and are bound by GDPR-compliant commitments. We never sell your data.
Our hosting provider is To be completed : hosting provider.
Where it is hosted
Your data is hosted in the European Union. If a processor ever had to handle data outside the European Union, the transfer would be covered by appropriate safeguards, such as the European Commission's standard contractual clauses.
Cookies and local storage
The website only uses elements that are strictly necessary for it to work or linked to your explicit choices:
- Language cookie (
NEXT_LOCALE): remembers the language you chose, for 12 months. - Theme preference (browser local storage): remembers light or dark mode.
- Customer area session: keeps you signed in to your account.
We do not use any advertising cookies or third-party audience measurement tools. These elements therefore do not require your prior consent.
Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data, as well as the right to withdraw your consent at any time and to set instructions regarding your data after your death.
To exercise them, write to us at contact@codanalyst.tech. We reply within one month. If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with the authority of your country.
Security
Exchanges with the website are encrypted (HTTPS), passwords are stored in a non-reversible form and access to data is limited to the people who need it.
Changes
We may update this policy. In case of a significant change, we will let you know by email or with a message on the website.