Privacy Policy

1. Data controller

The personal data collected on the Toolsky website (https://toolsky.fr, the "Site") is processed by [COMPANY NAME — TO BE COMPLETED], whose contact details appear in the legal notice. For any question regarding your data: hello@toolsky.fr.

2. Data collected, purposes and legal bases

2.1 User account

When creating an account (magic link by email or Google sign-in): email address and, via Google, name and profile picture. Purpose: creation and management of your account, access to offers. Legal basis: performance of the contract. Retention: for the lifetime of the account, then deletion within a maximum of three (3) years after the last activity.

2.2 Payment

In the event of a Premium subscription, the payment is processed by Stripe; we do not store any bank card data. We keep the Stripe customer identifier and the purchase history. Purpose: provision of Premium access, billing. Legal basis: performance of the contract and legal obligation (accounting records are kept for ten (10) years).

2.3 Newsletter

If you subscribe to the newsletter: email address. Purpose: sending good deals and alerts about new deals. Legal basis: your consent, which you can withdraw at any time (unsubscribe link or request to the contact address). Retention: until consent is withdrawn, or three (3) years after the last contact.

2.4 Usage statistics

We measure the use of the Site with our own tools, without any advertising tracker: offer pages viewed, outbound clicks to offers and searches performed. If you are logged in, these events are associated with your email address. Purpose: improvement of the catalogue and the service. Legal basis: legitimate interest. Retention: twenty-five (25) months maximum.

2.5 Support

When you contact us by email or via the chat (Crisp): the content of the exchanges and the contact details provided. Purpose: handling your requests. Legal basis: legitimate interest (responding to your requests). Retention: for the time needed to handle the request, then two (2) years maximum.

3. Recipients and processors

Your data is neither sold, rented nor transferred. It is accessible to the Publisher and to the following technical providers, acting as processors for the sole purposes described above:

• Vercel (United States) — hosting of the Site;
• MongoDB — database (accounts, offers, statistics);
• Stripe (Ireland/United States) — secure payment;
• Resend (United States) — sending of login emails and the newsletter;
• Google (Ireland/United States) — "Sign in with Google" authentication, if you choose this option;
• Crisp (France) — support chat.

Some of these providers are located outside the European Union. Transfers are governed by appropriate safeguards within the meaning of the GDPR (European Commission standard contractual clauses and/or certification under the EU–US Data Privacy Framework).

4. Cookies

The Site uses only:

• strictly necessary cookies for the operation of the Site (login session, security), exempt from consent;
• functional cookies from the Crisp chat, used only to ensure the continuity of the support conversation.

The Site does not use any advertising cookie or third-party audience tracker; our usage statistics are carried out server-side, without setting any cookie.

5. Security

We implement appropriate technical and organisational measures to protect your data: encryption of communications (HTTPS), passwordless authentication, restricted access to data. In the event of a data breach likely to result in a high risk to your rights, you will be informed in accordance with the regulations.

6. Your rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights over your data: access, rectification, erasure, restriction of processing, objection, portability, withdrawal of consent at any time, as well as the right to set guidelines regarding the fate of your data after your death.

To exercise these rights, contact us at hello@toolsky.fr. We respond within one (1) month. If you believe that your rights are not being respected, you may lodge a complaint with the CNIL (www.cnil.fr).

7. Minors

The Site is not intended for children under fifteen (15) years of age. We do not knowingly collect data concerning them. If you are a parent or guardian and believe that your child has provided us with personal data, contact us to request its deletion.

8. Policy updates

We may update this policy to reflect changes in our practices or in the regulations. Any change is published on this page; in the event of a substantial change, users who have an account will be informed by email.