Privacy policy
Last updated: 2026-05-26
1. Data controller
The controller of the data collected on this site is Escale & CO.
For any question regarding your personal data: contact@example.com.
Remember to replace this address with your real contact address before going to production.
2. Data collected and purposes
The personal data collected depends on the features you use. The full list is in the Sub-processors section below, where each recipient indicates precisely the data they process and for what purpose.
3. Legal basis for processing
The processing of your data is based on one of the legal bases provided for in Article 6 of the GDPR depending on the context: performance of a contract, legitimate interest, consent, or legal obligation.
4. Sub-processors and recipients
To provide this service we use third-party sub-processors. Each sub-processor only processes data strictly necessary for its mission, under a contract compliant with Article 28 of the GDPR.
Vercel Inc.
440 N Barranca Ave #4133, Covina, CA 91723, USA
- Purpose
- Hosting and serverless function execution (Frankfurt region - fra1)
- Data processed
- IP addresses
- Server logs
- Session cookies
- Retention
- 30 days for logs
- Legal basis
- Legitimate interest (Art. 6.1.f GDPR)
- Transfer / details
- Standard Contractual Clauses (SCC). Functions run in the EU (Frankfurt) but legal entity is US-based
- Learn more
- Privacy policyData Processing Agreement (DPA)
Databricks, Inc. (Neon)
160 Spear Street, 13th Floor, San Francisco, CA 94105, USA
- Purpose
- PostgreSQL database hosting
- Data processed
- All application data stored in the database
- Retention
- Account lifetime (deletion on request)
- Legal basis
- Contract performance (Art. 6.1.b GDPR)
- Transfer / details
- Standard Contractual Clauses (SCC). Database region configurable (eu-central-1 available)
- Learn more
- Privacy policyData Processing Agreement (DPA)
Resend Inc.
2261 Market Street #4667, San Francisco, CA 94114, USA
- Purpose
- Transactional email delivery
- Data processed
- Recipient email
- Content of sent emails
- Retention
- 30 days for delivery logs
- Legal basis
- Contract performance / legitimate interest
- Transfer / details
- Standard Contractual Clauses (SCC)
- Learn more
- Privacy policyData Processing Agreement (DPA)
Stripe Payments Europe, Limited
1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Irlande
- Purpose
- Card payment processing
- Data processed
- Name
- Billing address
- Payment information (card numbers never transit through our server, entered directly with Stripe)
- Retention
- Legal accounting period (10 years in France)
- Legal basis
- Contract performance (Art. 6.1.b GDPR) + legal obligation (Art. 6.1.c)
- Transfer / details
- Technical data may be transferred to Stripe, Inc. (USA) via Standard Contractual Clauses
- Learn more
- Privacy policyData Processing Agreement (DPA)
Cloudflare, Inc.
101 Townsend Street, San Francisco, CA 94107, USA
- Purpose
- File storage and distribution (uploaded binary objects)
- Data processed
- User-uploaded files
- Metadata (name, MIME type, size)
- Retention
- Account lifetime (deletion on request)
- Legal basis
- Contract performance (Art. 6.1.b GDPR)
- Transfer / details
- Standard Contractual Clauses (SCC)
- Learn more
- Privacy policy
5. Your rights
Under the GDPR you have the following rights over your data:
- Right of access and rectification
- Right to erasure (right to be forgotten)
- Right to data portability
- Right to object and restrict processing
- Right to withdraw consent at any time (where processing is based on consent)
- Right to lodge a complaint with the CNIL (cnil.fr)
To exercise your rights: contact@example.com. We undertake to respond within a maximum of one month.
6. Cookies
This site uses by default only cookies strictly necessary for its operation (session, preferences). No advertising or profiling cookies are deposited without your explicit consent.
If an audience analysis feature requiring consent is enabled (e.g. Google Analytics), a consent banner appears before any non-essential cookie is set.
7. Updates
This policy may be updated to reflect changes in the services and sub-processors used. The date of the last update is indicated at the top of this page. Substantial changes will be notified by email to account holders.