Cortenys
Privacy policy
This policy explains which personal data are processed on the Cortenys website, for which purposes, with which providers, and for how long.
Controller
The controller is CORTENYS, 26 ALLEE CIRCULAIRE, 93600 AULNAY-SOUS-BOIS, France.
- General contact: contact@cortenys.com
- Data protection contact: contact@cortenys.com
Main processing activities
We may process contact data, account data, order and payment information, support requests, and technical data required to operate and secure the website.
These activities rely on contract performance, legitimate interest, legal obligations, or consent where required by law.
Processors
Authorized internal teams and necessary service providers may access data within the scope of their duties.
- Supabase for authentication and application data
- Stripe for payment processing
- Resend for transactional and contact emails
- OpenAI for on-site assistance
- Google OAuth for Google sign-in
- Vercel for hosting and delivery infrastructure
Retention
Contact requests are kept for 3 years after the last useful contact.
Customer accounts are kept for the lifetime of the account, then 3 years after deletion or last activity unless legal obligations require otherwise.
Invoices and accounting records are kept for 10 years where legally required.
Security and rate-limit logs are kept for 6 months.
Assistant conversations are not stored by CORTENYS.