Privacy Policy

Who is responsible

Wissem Hadhri — Entrepreneur individuel (EI) — micro-entreprise, régime micro-BNC, trading as H2WI CONSULTING

66 avenue des Champs-Élysées, 75008 Paris, France

Contact: contact@esclab.h2wi.fr

What we collect, and why

• Account — email address, display name and avatar, provided by you or your sign-in provider; plan and subscription dates. Legal basis: performance of a contract.
• Waitlist and invitation — the email address you leave on the waitlist (collected by Clerk), to send you an invitation; then the lab access flag stored in your account. Legal basis: pre-contractual steps taken at your request, then performance of a contract.
• Use of the service — per-account request counters, kept in memory to enforce usage limits, never written to the database. Your lab settings (time zone, chart theme and settings, templates, closed panels) stay in your browser only. Legal basis: performance of a contract.
• Billing — plan, subscription status and dates, Stripe customer identifiers, date and version of the terms accepted. Card details are handled entirely by Stripe and never reach our servers. Legal basis: contract and accounting obligations.
• Messages — what you write to us (contact form or email). Legal basis: legitimate interest in replying.
• Audience measurement — page views and technical data, only after you explicitly agree, revocable at any time. Legal basis: consent.
• Security — technical error logs; your IP address is kept in memory for a few minutes to prevent abuse, never written to the database. Legal basis: legitimate interest.

Recipients and processors

The service relies on the following providers:

• Clerk — authentication, account management, waitlist and sending invitations.
• Stripe — payments, invoices and subscriptions.
• Google Analytics — audience measurement, only after you agree.
• Sentry — technical error reporting, without your account’s identification data.
• Resend — transactional emails (replies, account notifications).
• Hetzner Online GmbH — hosting of the application and its database, Industriestr. 25, 91710 Gunzenhausen, Allemagne — serveurs en Allemagne.

Transfers outside the European Union

Clerk, Stripe, Google, Sentry and Resend are established in the United States or may process data there. These transfers rely on the safeguards provided by the GDPR: the European Commission’s adequacy decision for providers certified under the EU–US Data Privacy Framework, or the Commission’s standard contractual clauses. Our hosting and backups stay in Germany.

Cookies

Details of cookies and of your choice are on the Cookies page.

Retention

• Account: for as long as your account exists, then deleted on request (see “Your rights”).
• Waitlist: until the invitation is sent, or until you ask to be removed.
• Contact messages: 3 years after the last exchange.
• Billing records: kept by Stripe, ten years (French accounting law).
• Technical logs: size-limited rotation, no archiving.
• Backups: 14 days, in Germany.

Your rights

Access, correction, deletion, restriction, objection and portability: write to contact@esclab.h2wi.fr. We reply within the one-month period set by the GDPR. You can download your data yourself from “My account” and withdraw your analytics consent at any time. Deleting your account erases your data on our side, subject to backups (14 days) and accounting obligations. You may also lodge a complaint with the CNIL (cnil.fr).