Privacy policy

At Desply, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your data when you use our platform.

1. Data we collect

When you use Desply, we may collect the following data:
- Account Information: Name, email address, company name.
- Billing Information: Payment details processed securely via Stripe (we do not store credit card information).
- Usage Data: Information about how you interact with Desply (e.g., uploaded files, shared links, page views).
- Technical Data: IP address, browser type, device information, and cookies (see our Cookie Policy for details).

2. How we use your data

We use your data to:
- Provide and improve our service.
- Process payments and manage subscriptions.
- Communicate with you about your account, updates, and support requests.
- Ensure security and prevent fraud.
- Comply with legal obligations (e.g., tax regulations).

3. Legal basis for processing (GDPR)

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases for processing your data:
- Contractual Obligation: To provide the service you signed up for.
- Legitimate Interest: To improve our platform and prevent fraud.
- Consent: When you agree to receive marketing communications.
- Legal Compliance: When required by tax or regulatory authorities.

4. Data sharing and third-party services

We do not sell your data. However, we share certain data with trusted third parties necessary to operate our service:
- Payment Processing: Stripe (for handling subscriptions and payments).
- Email Communication: Resend (for transactional emails).
- Analytics: Plausible (privacy-friendly analytics, no tracking cookies).
- Hosting and Storage: Supabase, Backblaze, BunnyCDN (for file storage and delivery).
These providers process data under strict security and confidentiality agreements.

5. Data retention and deletion

- Account Data: We retain your account information as long as you use our service. If you delete your account, data will be permanently erased within 30 days.
- Trial Expiration: If you do not subscribe after your free trial, we will retain your files for 30 days before automatic deletion.
- Billing Data: Retained for tax compliance purposes for up to 7 years.

6. Your rights under GDPR

Under GDPR, you have the right to:
- Access: Request a copy of your data.
- Correction: Update inaccurate or incomplete information.
- Deletion (Right to Be Forgotten): Request data deletion (except where retention is required by law).
- Data Portability: Receive your data in a structured format.
- Withdraw Consent: Stop receiving marketing emails at any time.
You can exercise these rights by contacting us at hello@desply.com.

7. International data transfers

If you are located in the EU/EEA, your data may be transferred outside the EU for processing (e.g., Stripe, Supabase). We ensure these transfers comply with GDPR safeguards, such as EU Standard Contractual Clauses (SCCs).

8. Security measures

We implement strict security measures to protect your data:
- End-to-end encryption for file transfers.
- Secure authentication for account access.
- Regular security audits and monitoring.

9. Cookies and tracking

Desply uses minimal cookies and tracking:
- Essential Cookies: Required for login and session management.
- Analytics: We use Plausible, a privacy-friendly alternative that does not store personal data.
See our Cookie Policy for more details.

10. Changes to this privacy policy

We may update this Privacy Policy from time to time. We will notify users of significant changes. Continued use of Desply after updates means you accept the revised policy.

11. Contact information

If you have any questions about this Privacy Policy, contact us at:
Company Name: Desply
Email: hello@desply.com
Data Protection Officer (if required): Martial Chouvel