Privacy policy

Version in force as of 19 October 2026 — English version; the French version prevails.

1. Controller

XTRION, sole trader (French micro-entreprise) — xtriontechnologie@gmail.com.

2. Data and purposes

Account data (contract); payment data via Stripe, never card numbers (legal obligation, contract); usage data — images translated, language, source page address, signed-in devices, IP address — for credit counting, security and fraud/account-sharing prevention (contract, legitimate interest); images are processed transiently and never published; consent records (legitimate interest, legal obligation).

3. Recipients

Google (Gemini API, paid tier) reads and translates image text; Google states it does not use this data to improve its products and keeps requests for a limited time to detect abuse. Processing may occur outside the EU under the European Commission's standard contractual clauses. Also Stripe (payments), OVHcloud (hosting in France) and an email provider. No data is sold; no advertising or third-party analytics trackers; only strictly necessary cookies.

4. Retention

Account: duration of the contract + 3 years after last activity. Accounting records: 10 years. Usage and security logs: 12 months. Consent records: 5 years after the contract ends. Images: no durable storage.

5. Your rights

Access, rectification, erasure, restriction, objection, portability: xtriontechnologie@gmail.com. You may complain to the CNIL (www.cnil.fr) or your local authority.