Privacy Policy

1. Introduction

Welcome to Carouselr. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Carouselr is operated by a French company and complies with the General Data Protection Regulation (GDPR) and French data protection laws (Loi Informatique et Libertés).

By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our service.

2. Data Controller Information

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Information You Provide

During the beta phase, we may collect:

• Account information (email address, name) when you sign up
• Profile information you choose to provide
• Content you create using our service (carousel designs, text, images)
• Communications with us (support requests, feedback)

3.2 Automatically Collected Information

When you use our service, we automatically collect:

• Usage data (pages visited, features used, time spent)
• Device information (browser type, operating system, device type)
• IP address and approximate location (country/region)
• Log data (access times, error logs)
• Cookies and similar tracking technologies (see our Cookie Policy)

3.3 Analytics

We use privacy-focused analytics tools (such as Plausible) that do not use cookies and respect user privacy. These tools help us understand how our service is used and improve user experience.

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you sign up for our service and agree to our terms
• Contract Performance: To provide the services you requested
• Legitimate Interests: To improve our service, prevent fraud, and ensure security
• Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Information

We use the collected information for:

• Providing and maintaining our service
• Processing your carousel creations and exports
• Authenticating your account and ensuring security
• Communicating with you about updates, features, and support
• Analyzing usage patterns to improve our service
• Detecting and preventing fraud or abuse
• Complying with legal obligations
• Sending marketing communications (with your consent, which you can withdraw at any time)

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

6.1 Service Providers

We work with third-party service providers who process data on our behalf:

• Cloud hosting providers (data stored in EU)
• Authentication services (for secure login)
• Email service providers
• Analytics providers (privacy-focused)

6.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (court orders, subpoenas)
• Requests from law enforcement or government authorities
• Protection of our rights, privacy, safety, or property
• Emergency situations involving safety or security

7. Data Retention

We retain your personal data only for as long as necessary:

• Account data: Until you delete your account, plus 30 days for backup purposes
• Content: Until you delete it or your account is closed
• Usage logs: Maximum 12 months
• Legal records: As required by French law (typically 5 years)

After these periods, data is securely deleted or anonymized.

8. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Lodge a Complaint: File a complaint with the CNIL (French data protection authority)

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest
• Access controls and authentication
• Regular security assessments
• Secure development practices
• Data hosting in EU-based secure facilities

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

Your data is primarily stored and processed within the European Union. If we transfer data outside the EU, we ensure:

• Adequate level of protection (adequacy decisions)
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Compliance with GDPR requirements

11. Children's Privacy

Our service is not intended for users under 16 years of age (or the minimum age in your country). We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us, and we will delete such information.

12. Cookies and Tracking

We use minimal cookies and tracking technologies. For detailed information, please see our Cookie Policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Significant changes will be communicated via:

• Email notification (if you have an account)
• Prominent notice on our website

Continued use of our service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us: