PRIVACY POLICY

Convergence Lab (hereinafter "we", "our" or "Convergence Lab"), publisher of the Cadrant.ai platform, is committed to protecting the privacy of its users. This policy describes how we collect, use, share and protect your personal data, in accordance with the General Data Protection Regulation (GDPR) and French legislation.

1. DATA CONTROLLER

The data controller is Convergence Lab, publisher of the Cadrant.ai platform, reachable at: dpo@cadrant.ai.

2. DATA COLLECTED

2.1 Data provided during registration

• First name
• Last name
• Email address
• Phone number
• Password (stored in encrypted form)

2.2 Automatically collected data

• IP address and connection data
• Platform usage logs
• Browsing data and user preferences

2.3 Transaction-related data

• Payment and subscription history (via Stripe)
• Invoices issued

2.4 Technical data related to services

• Custom domain names configured via Cloudflare
• Supabase access tokens (encrypted, used only for executing requested features)
• Source code of generated applications (exclusive property of the User)

We do not collect "sensitive" data within the meaning of the GDPR.

3. PURPOSES OF PROCESSING

Your data is processed for the following purposes:

• User account creation and management
• Provision of Cadrant.ai services (application generation, deployment, hosting)
• Subscription and billing management
• Custom domain name connection via Cloudflare
• Integration with the User's Supabase services
• Customer support and service-related communication
• Continuous platform improvement
• Fraud prevention and account security
• Compliance with legal and accounting obligations

4. LEGAL BASIS FOR PROCESSING

In accordance with the GDPR, processing is based on:

• Contract performance: for the provision of Cadrant.ai services
• Explicit consent: for sending marketing communications
• Convergence Lab's legitimate interest: for security, fraud prevention and service improvement
• Compliance with legal obligations: for the retention of billing data

5. DATA RECIPIENTS

5.1 Technical sub-processors

Your data may be transmitted to the following technical sub-processors, in strict compliance with confidentiality:

• Amazon Web Services (AWS) — hosting of generated applications
• Cloudflare — custom domain name management and SSL certificates
• Stripe — secure payment processing
• Supabase — only via the access token provided by the User

5.2 Commitments

No personal data is sold to third parties. No transfer for external commercial purposes is made without your prior consent.

6. HOSTING AND TRANSFERS OUTSIDE THE EU

Applications generated via Cadrant.ai are hosted on AWS servers. Some of these servers may be located outside the European Union. In this case, Convergence Lab undertakes to implement appropriate safeguards in accordance with the GDPR (European Commission standard contractual clauses).

Data processed via Cloudflare and Stripe is also subject to equivalent contractual safeguards.

7. DATA RETENTION PERIOD

• Account data: for the duration of account activity, then 3 years from the last activity
• Application source code: 30 days after account termination, unless previously downloaded by the User
• Billing data: 10 years (legal accounting obligation)
• Connection logs: 12 months
• Supabase tokens: deleted upon revocation of access by the User

8. YOUR RIGHTS

In accordance with the GDPR, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing
• Right to restriction of processing
• Right to withdraw your consent at any time

To exercise your rights, contact our Data Protection Officer:

• Email: dpo@cadrant.ai
• Company: Convergence Lab — Cadrant.ai Platform
• Address: 55 rue Grignan, 13006 Marseille

In the event of an unresolved dispute or complaint, you may file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr.

9. DATA SECURITY

Convergence Lab implements all appropriate technical and organizational measures to ensure the security of your personal data:

• Encryption of passwords and access tokens
• Data transmission via encrypted protocols (HTTPS/TLS)
• Data access restricted to authorized personnel only
• Access monitoring and logging
• Regular data backups

10. COOKIES AND TRACKERS

Cadrant.ai uses cookies strictly necessary for the operation of the platform (authentication, session). Analytical cookies may be used to improve the user experience, subject to your consent.

You can manage your cookie preferences from your browser settings or via our consent management tool.

11. GENERATED APPLICATION DATA

The data contained in the applications you create via Cadrant.ai (including data stored in your connected Supabase account) belongs exclusively to you. Convergence Lab only accesses this data within the strict scope of executing requested features and does not use it for its own commercial or analytical purposes.

12. POLICY UPDATES

Convergence Lab reserves the right to modify this policy at any time. Any substantial modification will be notified by email or via the Cadrant.ai platform. We encourage you to consult this page regularly.

13. CONTACT

For any questions regarding this privacy policy:

• Email: dpo@cadrant.ai
• Website: https://cadrant.ai/confidentialite