Privacy Policy

Effective Date: Jan. 10 2025

CARREDASH SAS, operating as 7aeo ("Company", "we", "us", or "our"), is committed to protecting the privacy and data of its users ("User" or "you"). This Privacy Policy explains how we collect, use, store, and protect your data in compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

1. Data Controller

CARREDASH SAS is the Data Controller for personal data collected via the 7aeo platform. Contact information:

Company Name: CARREDASH SAS
Address: 229 rue Saint Honoré, 75001 Paris, France
Email: privacy@7aeo.com

2. Data We Collect

2.1 Data You Provide Directly

Account Information: Name, email address, password (hashed), billing address, and phone number (optional).
Payment Information: Payment details provided via Stripe; we do not store full credit card information.
Content Data: User-generated content, such as input prompts and outputs generated on the platform.

2.2 Automatically Collected Data

Usage Data: IP address, browser type, operating system, language preferences, time spent on the Platform, and interactions with features.
Cookies and Tracking Technologies: Details collected via cookies, pixels, or similar technologies.

2.3 Third-Party Data

Data from Third-Party Services: If you log in via third-party platforms (e.g., Google), we collect basic account details shared by those platforms.

2.4 Anonymized Data

We may aggregate and anonymize usage data for analytics and service improvement.

3. Legal Basis for Processing

We process your data based on the following legal grounds:

Contractual Necessity: To fulfill our contractual obligations, such as providing access to the platform or processing payments.
Legitimate Interests: For platform analytics, fraud prevention, and customer support.
Consent: For optional features, such as marketing communications or cookies, where applicable.
Legal Obligations: To comply with regulatory or statutory obligations.

4. How We Use Your Data

We use personal data for the following purposes:

Service Provision:To deliver, personalize, and improve the platform's functionalities.
Account Management: To manage User accounts, subscriptions, and preferences.
Payment Processing: To process payments securely via Stripe.
Customer Support: To respond to inquiries or troubleshoot issues.
Analytics and Improvements: To analyze usage patterns and enhance service performance.
Compliance: To meet legal and regulatory requirements.

5. Sharing and Disclosure

We may share your data with:

5.1 Service Providers

Payment Processing: Stripe processes all payments securely.
Hosting and Infrastructure: Cloud service providers ensuring uptime and performance.
Analytics Providers: Tools like Google Analytics for usage statistics.

5.2 Legal and Compliance

To comply with legal obligations or respond to lawful requests by public authorities.
To enforce our Terms & Conditions or investigate potential breaches.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, User data may be transferred to the acquiring entity.

6. Cookies and Tracking

We use cookies and similar tracking technologies to enhance the User experience. These include:

Essential Cookies: Required for platform functionality.
Performance Cookies: To gather analytics on platform usage.
Marketing Cookies: To deliver personalized advertising, subject to User consent.

You can manage cookie preferences through your browser settings.

7. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, including:

Account Data: Retained while your account remains active.
Billing Records: Retained for up to 10 years to comply with tax and accounting laws.
Anonymized Data: May be retained indefinitely for analytical purposes.

8. Your Rights

As a User, you have the following rights under GDPR:

Access: Request access to your personal data.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request deletion of your data, subject to legal exceptions.
Portability: Receive a copy of your data in a structured format.
Restriction: Limit the processing of your data.
Objection: Object to data processing based on legitimate interests.
Withdraw Consent: Revoke consent where applicable.

To exercise these rights, contact us at privacy@7aeo.com.

9. Data Security

We implement robust security measures to safeguard personal data, including:

Encryption of sensitive data in transit (e.g., HTTPS).
Secure data storage using industry-standard protocols.
Access control policies restricting data access to authorized personnel.

However, no online platform is 100% secure. Users are responsible for maintaining the confidentiality of their login credentials.

10. International Data Transfers

As our services are global, data may be processed outside of the European Economic Area (EEA). Any such transfers are safeguarded by:

Standard Contractual Clauses (SCCs): Ensuring GDPR-level protection for non-EEA transfers.
Adequacy Decisions: For countries deemed adequate by the European Commission.

11. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect data from minors.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in our practices or legal requirements. Users will be notified of material changes via email or platform notification. The updated policy will indicate the "Effective Date" at the top.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact:

Email: privacy@7aeo.com
Mail: CARREDASH SAS, 229 rue Saint Honoré, 75001 Paris, France