Your data, our responsibility.

Perfecture.fr is responsible for processing the personal data collected through the site and the service. For any request regarding your data, use the contact page.

We only collect the data necessary for the service to function:

• Account data: email address, and phone number if you enable SMS alerts.
• Monitoring data: the process and prefecture you want to monitor.
• Notification data: the Telegram connection identifier if you link a Telegram account, and browser notification activation details if you enable this channel.
• Payment data: processed directly by Stripe; we never receive or store your card number.
• Purchase data: for each order, the Stripe checkout session identifier, the plan and its duration, the amount paid, the currency, the purchase date, the monitoring concerned and the end date it grants, and the payment status (paid, or covered by a discount code). The details entered on the payment page (name, email address, country) stay with Stripe: we do not copy them.
• Browsing data: audience measurement without audience cookies and session diagnostics via PostHog, with form inputs masked. Accepting full tracking also enables audience cookies and linking browsing activity to your signed-in account.
• Messages: the content you send us via the contact form.

• To send you the availability alerts you have set up (performance of the contract).
• To manage your account, purchases and billing (performance of the contract, legal obligations).
• To respond to your messages (legitimate interest).
• To measure navigation and diagnose problems. Audience cookies and tracking linked to your account are enabled according to your choice in the tracking banner.
• To measure the effectiveness of our advertising on Facebook and Instagram, only with your consent to advertising.

We never sell your data. Advertising measurement for Perfecture through Meta is enabled only with your consent.

Your data is processed by subprocessors and providers strictly necessary for the service:

• Supabase: database hosting and authentication (European Union).
• Vercel: hosting the website and processing the technical requests necessary to serve its pages.
• Stripe: secure payment processing, refunds and fraud prevention. Stripe acts as controller for its own purposes, described in its own privacy policy.
• Resend (United States): sending transactional emails and alerts.
• OVHcloud (France): delivery of alert and verification SMS messages, if you enable SMS alerts.
• Telegram: delivery of alerts to the Telegram channel you have connected, subject to Telegram's own terms and privacy policy.
• PostHog: audience measurement and session diagnostics (European Union hosting). Audience cookies and account-linked browsing require your acceptance of full tracking.
• Meta Platforms: Meta pixel measuring the effectiveness of our Facebook and Instagram ads. Loaded only if you accept advertising in the tracking banner; Meta then sets its own cookies and may transfer data outside the European Union.

Your account and monitoring data are kept for as long as your account is active. If you delete your account, it is erased, except for data we are legally required to retain. Audience-measurement data is retained for limited periods in line with CNIL recommendations.

Billing records are kept for ten (10) years in accordance with accounting and tax obligations. Stripe retains the transaction data required for its own legal obligations.

A consent banner lets you accept or decline, separately, audience-measurement cookies and the Meta advertising pixel on your first visit. You can change your choice at any time with the 🍪 button. Cookies strictly necessary for the site to function (authentication, security) do not require consent.

Under the GDPR, you have the right to access, rectify, erase, port, restrict, and object to the processing of your data. To request deletion of your account or exercise your other rights, use the contact page. You may also lodge a complaint with the CNIL (cnil.fr), the French data protection authority.

Exchanges with the site are encrypted (HTTPS), database access is restricted, and payments are entirely delegated to Stripe, which is PCI-DSS certified. In the event of a data breach likely to affect you, you will be informed in accordance with applicable regulations.

Most of our providers host your data within the European Union. Some are located outside the EU, in particular Vercel, Resend (United States), Stripe, Telegram and Meta Platforms. These transfers are governed by the safeguards provided for by the GDPR, such as the European Commission's standard contractual clauses or an adequacy decision. These providers describe the transfers they carry out for their own purposes in their respective policies.

This policy may evolve along with the service. The applicable version is the one published on this page; any material change will be brought to your attention.