Privacy Policy

1. Introduction

CREADIAZ® is committed to protecting the privacy of its users. This Privacy Policy describes the types of personal data we collect, how we use it, and the measures we take to protect it, in accordance with the General Data Protection Regulation (GDPR).

2. Data Controller

The data controller for personal data is CREADIAZ®, reachable by email at equipe@creadiaz.org.

3. Data Collected

We collect the following data:

• Registration data: last name, first name, email address
• Connection data: IP address, device information, date and time of connection
• Usage data: program progress, sessions viewed, time spent
• Payment data: processed directly by Stripe — we do not store any banking information
• Contact data: information submitted through the contact form

4. Purpose of Processing

Personal data is collected for the following purposes:

• User account management and authentication
• Service provision and personalization (progress tracking)
• Payment processing and invoicing
• Communication with the user (support, notifications)
• Platform security (anomaly detection, single-device limitation)
• Service improvement and anonymized statistical analysis

5. Legal Basis for Processing

Processing is based on: contract performance (program delivery), consent (contact form), legitimate interest (security, service improvement), and legal obligations (invoicing).

6. Sub-processors

We use the following sub-processors:

• Supabase: database and authentication
• Stripe: payment processing
• Cloudflare: video hosting and delivery
• Vercel: web platform hosting

7. Data Retention

Account data is retained as long as the account is active. Payment data is retained in accordance with legal obligations (10 years). Contact data is retained for 3 years after the last contact. Users may request the deletion of their account at any time.

8. Your Rights

Under the GDPR, you have the following rights:

• Right of access to your personal data
• Right to rectification of your data
• Right to erasure (right to be forgotten)
• Right to restriction of processing
• Right to data portability
• Right to object to processing

To exercise these rights, contact us at equipe@creadiaz.org. You also have the right to lodge a complaint with your local data protection authority.

9. Cookies

The Platform uses technical cookies necessary for the proper functioning of the service (session, authentication). No advertising or tracking cookies are used.

10. Security

We implement appropriate technical and organizational measures to protect your data: data encryption in transit (HTTPS/TLS), secure authentication, restricted data access, and hosting on certified infrastructure.