Privacy Policy

1. Introduction

ChartsWork ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

We comply with the General Data Protection Regulation (GDPR) and French data protection laws. By using ChartsWork, you consent to the data practices described in this policy.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Information You Provide

• Account Information: Email address, name, and password when you create an account
• Payment Information: Billing details processed securely through PayPal (we do not store your payment card details)
• User Content: Charts, data, and configurations you create using our service
• Communications: Messages you send to us for support or inquiries

3.2 Information Collected Automatically

• Usage Data: Pages visited, features used, and interaction patterns
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring URLs

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract Performance: To provide our services and fulfill our contractual obligations
• Legitimate Interests: To improve our services, ensure security, and communicate with you
• Consent: For marketing communications and optional features
• Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Information

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze usage trends to improve user experience
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

6. Information Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service Providers: Third parties that help us operate our services (hosting, payment processing, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Our Service Providers

• Supabase: Database and authentication services (EU-compliant)
• PayPal: Payment processing
• Vercel: Hosting services

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Account Data: Until you delete your account
• Transaction Records: 10 years (legal requirement in France)
• Usage Data: 26 months

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at contact@chartswork.com. We will respond within 30 days.

9. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission for the destination country

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Regular security assessments
• Access controls and authentication

11. Cookies

We use essential cookies to ensure our website functions properly. These cookies are necessary for the service and cannot be disabled. They include:

• Authentication cookies: To keep you logged in
• Session cookies: To remember your preferences during your visit

12. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with a supervisory authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés).