PRIVACY POLICY

    Last updated: October 15, 2025

    WeeglAd SAS is committed to protecting the privacy of its users in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and the Data Protection Act.

    1. Data Controller

    WeeglAd SAS
    12 Avenue des Champs-Élysées, 75008 Paris
    Email : dpo@neurovia.com
    DPO : [Nom du DPO]

    2. Data collected

    DataPurposeLegal basisDuration
    Email, last name, first nameAccount ManagementContract3 years inactive
    Password (hashed)AuthenticationContract3 years inactive
    SIRET, SIRENIdentity verificationLegal obligation10 years
    Offers & CampaignsConnectingContractDuration of relationship + 3 years
    MessagesCommunicationContractDuration of relationship + 3 years
    IP (anonymisée), User AgentTracking, securityLegitimate interest13 months
    Cookies techniquesSite operationGDPR ExemptionSession
    Cookies analyticsUX ImprovementConsent13 months
    Bank detailsPaymentsContractNon stockées (Stripe/PayPal)
    Transaction historyAccountingLegal obligation10 years

    3. Data recipients

    • WeeglAd : Internal Processing
    • Stripe / PayPal : Payments
    • SendGrid : Transactional emails
    • AWS : Accommodation (EU)
    • Datadog : monitoring (anonymisé)
    • Authorities : by judicial requisition only

    Transfers outside the EU : None (unless explicit and boxed)

    4. Security

    • Encryption : TLS 1.3 (transit), AES-256 (repos)
    • Access : Role-Based Access Control (RBAC)
    • Anonymisation : Truncated IPs in tracking
    • Audits : Annual penetration testing

    5. User rights

    In accordance with the GDPR, you have:

    • Right of access : Get a copy of your data
    • Right to rectification : Correct your data
    • Right to erasure ("Right to be forgotten")
    • Right to portability : receive your data in JSON format
    • Right to object : Opting out of certain processing (marketing)
    • Right to Limitation : Temporarily suspend treatment

    Contact : dpo@neurovia.com
    Response time : 30 days maximum

    6. Cookies

    See the Cookie Policy detailed.

    7. Minors

    The site is reserved for people 18 years of age and older.

    8. Amendments

    Any changes will be notified by email 30 days before.

    9. Complaints

    Right to complain to the CNIL: https://www.cnil.fr/fr/plaintes