Privacy policy

Who we are

The data controller for Dravlo is Adrien Tchinda EI (Dravlo), 14 bis rue du Buisson Saint-Louis, 75010 Paris, France. Contact for personal data requests: adr.tchinda@gmail.com.

Data we collect

• Account: email address; name and profile picture if you sign in with Google; sign-in timestamps.
• Usage: each run of a tool (app, action, date, AI model, number of tokens and estimated cost). Without an account, runs are counted with a daily hash of your IP address, salted and not reversible; your IP address itself is not stored.
• Content you submit to a tool: sent to the AI provider to generate your result. Whether a given app saves it is stated in that app.
• Payments: handled by Stripe. We store your Stripe customer identifier and the status of your subscription or credits, never your card details.
• Consents: acceptance of the terms of sale and request for immediate access, with date and document version.
• Reports and feedback you send us (including an optional email address).
• Technical errors (Sentry), without session replay.

Purposes and legal bases

• Providing the service and your account
• Enforcing free limits and preventing abuse
• Payments, invoicing and accounting obligations
• Handling reports of illegal content
• Transactional emails (sign-in link, welcome, purchase, payment issue, limit reached)
• Fixing errors and improving the service

Legal basis for each purpose: [À COMPLÉTER]

Recipients and sub-processors

Vercel

Hosting and delivery of the website · United States and other countries (Standard Contractual Clauses)

Supabase

Authentication and database · European Union

Stripe

Payments, invoices and taxes · EEA and United States (EU-U.S. Data Privacy Framework and Standard Contractual Clauses)

OpenAI

AI text generation (content you submit to a tool) · OpenAI Ireland Ltd. (EU); onward transfers outside the EU under Standard Contractual Clauses

Anthropic

AI text generation (content you submit to a tool) · United States (Standard Contractual Clauses)

Resend

Transactional emails · United States (Standard Contractual Clauses)

Sentry

Error monitoring (no session replay) · United States (EU-U.S. Data Privacy Framework and Standard Contractual Clauses)

Upstash

Rate limiting (short-lived counters) · Region of the database we select; Upstash, Inc. is in the United States (EU-U.S. Data Privacy Framework and Standard Contractual Clauses)

Cloudflare

Bot protection (Turnstile) · Global network (EU-U.S. Data Privacy Framework and Standard Contractual Clauses)

Transfers outside the European Union and safeguards: [À COMPLÉTER]

Retention

• Account data: until you delete your account.
• Usage records: 12 months, then deleted automatically.
• Content generated without an account and saved by an app: 30 days, then deleted automatically.
• Consents, invoices and payment records: [À COMPLÉTER]
• Reports and feedback: [À COMPLÉTER]

Your rights

You can access, rectify, erase and port your data, object to or restrict its processing. From the account page you can download all your data (JSON) and delete your account; deletion removes your data from all our apps and cancels your subscriptions.

For any other request, write to adr.tchinda@gmail.com. You can also lodge a complaint with the CNIL (cnil.fr). [À COMPLÉTER]

Cookies

We only use cookies that are necessary for the service. See the cookie policy.