Privacy policy
Last updated: [DATE]
Data controller: Chillax Capital, [ADRESSE], contact@ariette.app.
Data processed
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Buyer's email, name, country | Fulfil the order, deliver, support | Contract | 3 years after the last order |
| Questionnaire answers (recipient's first name, memories, occasion) | Generate the song | Contract | Deleted 30 days after delivery |
| Song, video, gift page | Delivery and sharing | Contract | Gift page active for 12 months, then deleted |
| Invoice and payment data (processed by the payment provider) | Accounting obligations | Legal obligation | 10 years (invoice); no card data stored by us |
| Cookieless audience measurement (Plausible) | Aggregated statistics | Legitimate interest | Aggregated data, without identifiers |
| Meta and TikTok advertising pixels | Campaign measurement | Consent | 13 months maximum |
| Marketing email (if ticked) | Offers and occasion reminders | Consent | Until unsubscription |
The customer must not provide sensitive data (health, opinions, etc.) in the questionnaire. When providing information about another person, the customer undertakes to do so in the context of a gift intended for that person.
Processors
| Processor | Role | Data location |
|---|---|---|
| Vercel | Hosting | EU (Frankfurt), US company |
| Neon | Database | EU (Frankfurt) |
| Anthropic | Lyrics writing and moderation | United States |
| ElevenLabs | Music generation | [À VÉRIFIER] |
| Resend | Email delivery | [À VÉRIFIER] |
| Stripe and Link (Stripe group, merchant of record for the transaction) | Payment, invoicing, VAT, fraud prevention | EU / United States |
| Meta, TikTok | Advertising (with consent) | United States / other |
| Plausible | Cookieless audience measurement | EU |
Transfers outside the European Union are governed by the EU-US Data Privacy Framework where the provider participates in it, or by the European Commission's standard contractual clauses. Data sent to AI providers is not used to train their models, in accordance with their commercial terms.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time. Write to contact@ariette.app. You may lodge a complaint with the CNIL (www.cnil.fr).