Privacy Policy

This privacy policy describes how the Formwise platform collects, uses, stores and protects the personal data of its users, in accordance with the General Data Protection Regulation (GDPR) and applicable French law.

1. Data controller

The data controller is Formwise, located at 11 Rue Étienne Henry Gouin 13011 Marseille, reachable at: formwisecontact@gmail.com.

2. Data collected

We collect only the data strictly necessary to provide our services:

  • First and last name
  • Email address
  • Password (encrypted)
  • Data related to the school
  • Banking information (via Stripe)
  • Connection and usage data

3. Purposes of processing

Data is used for:

  • creating and managing user accounts
  • processing payments (Stripe)
  • securing access and content (Supabase)
  • sending transactional emails (Resend)
  • continuous improvement of our services

4. Hosting

Data is hosted in France or in countries recognised as adequate by the European Commission. All data is secured by encryption, access control and regular backups.

5. Retention period

Data is retained for the duration of the contractual relationship, then archived in pseudonymised form (without first or last name) for a maximum of 3 years for evidentiary or legal compliance purposes, before final deletion.

6. Your rights

Under the GDPR, you have the following rights:

  • Right of access to your data
  • Right of rectification or erasure
  • Right to restrict processing
  • Right to portability
  • Right to object

You may exercise your rights by contacting us at: formwisecontact@gmail.com. We commit to replying within 30 days.

7. Security

Technical and organisational measures are in place to protect your data, in particular encryption, two-factor authentication, regular backups and strict access control.

8. Subprocessors

We rely on GDPR-compliant subprocessors:

  • Stripe for payments
  • Supabase for data hosting
  • Resend for transactional emails

Each of these services complies with the requirements of the GDPR.

9. Service continuity

Disaster Recovery Plan (DRP) and Business Continuity Plan (BCP) measures are in place to ensure the availability and integrity of the service.

10. Changes

We reserve the right to modify this policy at any time. In case of substantial change, you will be notified by email or upon your next connection to the platform.

11. Applicable law

This policy is governed by French law. In case of dispute, the courts of Marseille shall have sole jurisdiction.