Privacy Policy
Last updated: August 1, 2026
Article 1 — Data Controller
The data controller for personal data is:
Descarpentries Steeve
Sole proprietor — SIRET: 10507059300014
Address: 255 rue Alexandre Desrousseaux 59184 SAINGHIN EN WEPPES, France
Email: contact@intrigo.studio
Article 2 — Data Collected
| Data | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Name | Identification, billing | Contract performance | Account duration + 3 years |
| Email address | Communication, login | Contract performance | Account duration + 3 years |
| Billing address | Billing | Legal obligation | 10 years (accounting requirement) |
| Content (texts, files) | Service provision | Contract performance | Account duration + 90 days |
| Connection logs | Security, debugging | Legitimate interest | 12 months |
| Technical cookies | Service operation | Legitimate interest | Session duration |
Article 3 — Use of Data
Personal data is used exclusively to:
- provide and improve the Service;
- manage the User's Account;
- issue invoices;
- communicate with the User (support, Service-related notifications);
- ensure Service security.
The Publisher commits to:
- not selling personal data to third parties;
- not using data for advertising purposes;
- not analyzing User Content;
- not transmitting data to third parties, except where required by law or to subprocessors necessary for the Service's operation.
Article 4 — Subprocessors
Personal data may be transmitted to the following subprocessors, strictly within the scope of the Service's operation:
| Subprocessor | Purpose | Location | Safeguards |
|---|---|---|---|
| Ionos | Server hosting | Germany / EU | DPA contract, GDPR |
| Stripe | Online payment | EU / USA | PCI-DSS certified, DPA, standard contractual clauses |
The Publisher ensures that each subprocessor provides sufficient guarantees regarding the protection of personal data.
Article 5 — Transfers Outside the EU
Data is hosted within the European Union (Ionos, Germany).
Stripe may transfer certain data to the United States as part of payment processing. These transfers are governed by the standard contractual clauses approved by the European Commission and the EU-US Data Privacy Framework.
Article 6 — User Rights
In accordance with the GDPR, the User has the following rights:
- Right of access: obtain a copy of their personal data;
- Right to rectification: correct inaccurate data;
- Right to erasure: request deletion of their data;
- Right to portability: receive their data in a structured format;
- Right to object: object to the processing of their data;
- Right to restriction: request suspension of processing.
These rights may be exercised by sending an email to: contact@intrigo.studio
The Publisher commits to responding within thirty (30) days.
In case of a complaint, the User may file a claim with the relevant data protection authority. For EU residents: the French Data Protection Authority (CNIL) at https://www.cnil.fr, or your local supervisory authority.
Article 7 — Security
The Publisher implements appropriate technical and organizational measures to protect personal data, including:
- communication encryption (HTTPS/TLS);
- two-factor authentication;
- regular backups;
- per-user data isolation;
- restricted access to production data.
Article 8 — Cookies
The Service uses exclusively technical cookies necessary for its operation (session, authentication). These cookies do not require User consent in accordance with applicable privacy regulations.
The Service does not use advertising cookies, tracking cookies or behavioral analytics tools.