This Privacy Policy describes how Fernand collects, uses and protects the personal data you provide when you use the service. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data controller
Fernand acts as the data controller for the personal data of account holders, and as a data processor for the personal data that customers upload into their workspaces.
2. Data we collect
- Account data: name, email address, profile picture and authentication identifiers (e.g. Google or GitHub user id).
- Workspace data: the content you create or upload (organizations, members, projects, tasks, comments, etc.).
- Usage data: log entries, IP address, device information and pages viewed, used to operate and secure the service.
3. How we use data
We process personal data to provide, maintain and improve the service, to communicate with you about your account, to comply with legal obligations and to detect or prevent abuse.
4. Legal bases
Our processing relies on the performance of our contract with you, our legitimate interest in operating a secure service, and your consent where required by law.
5. Sharing
We do not sell personal data. We share data only with sub-processors that help us operate the service (hosting, email delivery, analytics) under contracts that protect your data.
6. International transfers
Personal data is primarily stored within the European Union. Where data is transferred outside the EU, we rely on the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism.
7. Retention
We retain personal data for as long as your account remains active and for the period required to comply with our legal obligations or to resolve disputes.
8. Your rights
Subject to applicable law, you have the right to access, rectify and erase your personal data, to object to or restrict processing, and to receive your data in a portable format. You may also lodge a complaint with the CNIL.
9. Security
We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and regular security reviews.
10. Changes
We may update this policy from time to time. Material changes will be notified through the service or by email.
11. Contact
For privacy questions or to exercise your rights, contact us at privacy@fernand.app.