Privacy Policy

Mathis Fleury, sole proprietor operating the Feedlo service (hereinafter "we", "our" or "Feedlo"), is committed to protecting the privacy of users of its website, widget and dashboard (hereinafter the "Services").

This Privacy Policy describes how we collect, use, store and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Data Collected

We collect the following categories of data:

• Account data: Name, email address and password (stored in hashed and secure form).
• Feedback data: Content of submitted feedback, feedback type (bug, feature, question), any screenshots attached.
• Usage data: Pages visited, features used, timestamps of actions.
• Technical data: IP address, browser type, operating system, device type.
• Payment data: Payments are processed by Stripe. We never store your credit card information.

Legal Basis for Processing

In accordance with Article 6 of the GDPR, we process your data on the following legal bases:

• Contract performance: processing necessary to provide the Services
• Consent: for marketing communications and certain cookies
• Legitimate interests: improving the Services, security, fraud prevention
• Legal obligation: retention of billing data

Purposes of Processing

We use your data to:

• Provide, maintain and improve the Services
• Process and deliver feedback submitted through the widget
• Send service-related communications
• Respond to your inquiries and support requests
• Detect and prevent fraud, abuse and security issues
• Comply with our legal obligations
• Produce anonymized statistics

Data Recipients

We never sell your personal data. We may share your information with:

• Hosting: O2switch (France) for hosting our servers
• Payment: Stripe (PCI-DSS certified) for payment processing
• Email: Email delivery services for service communications

These providers are contractually bound to protect your information and use it only for the purposes we specify.

International Transfers

Your data is primarily hosted in France and the European Union.

In case of transfers to third countries, we ensure appropriate safeguards are in place (standard contractual clauses, European Commission adequacy decisions).

Data Retention

We retain your data for the following periods:

• Active account: for the duration of your account, then 3 years after closure
• Deleted account: deletion within 30 days, unless legally required otherwise
• Billing data: 10 years (legal accounting requirement)
• Security logs: 12 months

Data Security

We implement appropriate technical and organizational measures:

• Data encryption in transit (HTTPS/TLS)
• Data encryption at rest
• Strict access controls and authentication
• Regular and secure backups
• Regular security updates
• Periodic security audits

Despite these measures, no transmission or storage system is completely secure. We cannot guarantee absolute security.

Data Breach Notification

In case of a personal data breach presenting a risk to your rights and freedoms, we commit to:

• Notify the CNIL within 72 hours of discovering the incident
• Inform you as soon as possible if the risk is high
• Document the incident and corrective measures taken

Exclusion of liability: Our liability shall in no case be engaged for data breaches resulting from malicious attacks, security flaws in third-party software, negligence of partners or subcontractors, actions of hackers, or any circumstances beyond our reasonable control. The user acknowledges using the service at their own risk and waives any claim or demand for compensation against us in case of data breach.

Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15): obtain a copy of your personal data
• Right to rectification (Art. 16): correct inaccurate or incomplete data
• Right to erasure (Art. 17): request deletion of your data
• Right to restriction (Art. 18): restrict processing of your data
• Right to portability (Art. 20): receive your data in a structured format
• Right to object (Art. 21): object to processing of your data
• Withdrawal of consent: withdraw your consent at any time

To exercise these rights, contact us at contact@myfeedlo.com. We will respond within one month.

You may also file a complaint with the CNIL (www.cnil.fr).

Cookies and Similar Technologies

We use cookies for:

• Essential cookies: maintaining your session, security
• Preference cookies: remembering your choices (language, theme)
• Analytics cookies: analyzing site usage (with your consent)

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Services.

Data of Minors

Our Services are not intended for persons under 16 years of age. We do not intentionally collect personal data from minors. If we learn that we have collected data from a minor, we will delete it as soon as possible.

External Links

Our Services may contain links to third-party sites. We are not responsible for the privacy practices of these sites. We encourage you to review their respective privacy policies.

Changes to this Policy

We may modify this Privacy Policy at any time. Significant changes will be notified by email or via a notification on the Services. The date of last update will always be indicated. Your continued use of the Services after any modification constitutes your acceptance of the modified policy.

Exclusion of Liability

The Services are provided "as is" and "as available", without warranty of any kind, express or implied. We do not guarantee that the Services will be uninterrupted, secure, error-free or virus-free.

To the maximum extent permitted by applicable law, we disclaim all liability for any direct, indirect, incidental, special, consequential or punitive damages, including but not limited to loss of profits, data, use, goodwill, reputation or any other intangible loss, regardless of cause.

The user expressly agrees to use the Services at their own risk. Under no circumstances shall we be held liable for any damage resulting from the use or inability to use the Services, including in case of negligence.

In case of force majeure (natural disaster, war, pandemic, Internet infrastructure failure, cyberattack, government decision), our liability is fully excluded.

Contact

For any questions regarding this Privacy Policy, contact us:

Data controller: Mathis Fleury
Email: contact@myfeedlo.com
Address: 66 Rue de Verdun, 76160 Darnétal, France