This policy describes the personal data processing carried out in connection with the Adrafteo service, based on the code currently present in the project.
Data collected in the project code
The site collects the following data for the user account and service management: email address, password, Supabase identifier, template name, template title, template content, cross variables, inventory items (name, status, type, condition, purchase price, target sale price, sale price, fees, dates, platforms, notes), inventory lots, and feedback messages (name, email, message).
These data are stored in Supabase and linked to the connected user through user_id in the project tables.
Purposes
- Create and manage a user account.
- Save personal templates and reusable variables.
- Track inventory, purchases, sales, margins and lots.
- Collect user feedback via the feedback form.
- Ensure the security and correct operation of the service.
Legal basis and retention period
For the user account and personal data storage, the legal basis is the performance of the service contract and account management.
Account data, templates, inventory and variables are kept while the account remains active and for up to two years after the user's last connection, unless the user requests earlier deletion.
Feedback messages are kept for up to 90 days after submission, then deleted from the feedback table unless a longer period is legally justified.
Recipients
Data are accessible to the user, the website editor, and the hosting providers: Supabase and Vercel.
Data are not transferred to a marketing tool or social network in the code identified today, but international transfers must be verified in the final Supabase and Vercel configuration.
Data subject rights
Under the GDPR, any person may request access, rectification, erasure, objection, restriction of processing and data portability.
To exercise these rights, contact: adrafteo@gmail.com.
You may also file a complaint with CNIL if you believe your rights are not respected.
How to exercise your rights
Send your request to adrafteo@gmail.com with the subject line “GDPR request”. Describe the right you wish to exercise and the account email concerned. Additional information may be requested when necessary to verify your identity.
Requests are handled without undue delay and generally within one month of receipt. This period may be extended by up to two additional months for complex requests; you will be informed if an extension is necessary.