Privacy Policy

This policy explains what data Inkluo processes, why, for how long, and what your rights are.

1. Data controller

The data controller is Moufid EL AROUI, a sole trader operating under the French micro-entreprise scheme, reachable at contact@inkluo.com.

2. Page analysis: no data collected

The accessibility audit performed by Inkluo runs entirely in your browser. The content of the pages you audit is never sent, stored or shared with a third party. No page analysis leaves the extension.

3. Data processed, purposes and legal bases

Email address (account): Account creation and management, sign-in. Legal basis: performance of a contract.
Anonymous installation identifier: Technical device identifier used to prevent trial abuse and account sharing. Legal basis: legitimate interest.
Subscription and payment data: Subscription and billing management. Payment is handled by Stripe; no card details are stored by Inkluo. Your email is shared with Stripe for billing. Legal basis: performance of a contract.
User feedback (bug, suggestion): When you send feedback, the following is transmitted: your email, your message, and technical information (operating system, browser, extension version, anonymous device fingerprint). Purpose: handle your request and improve the product. Legal basis: legitimate interest.
Per-device activity: A per-device activity trace (hashed identifier) helps detect account sharing. Legal basis: legitimate interest.

4. Retention periods

Account data: for the lifetime of the account, deleted when it is closed.
Per-device activity trace: 30 days (automatic purge), and deleted when the account is closed.
User feedback: kept for 36 months from when the request is handled, then deleted.
Anonymous account-closure log: kept in anonymous form for statistics.
Trial anti-fraud traces: kept to prevent repeat abuse.

5. Recipients and processors

To provide the service, Inkluo relies on the following processors:

Supabase — authentication and database.
Stripe — payment and subscription management.
Resend — sending transactional emails (sign-in codes, invitations).

6. Your rights

You have the right to access, rectify, erase, port, restrict and object. You can delete your account and data directly from the extension, via the “Delete my account” button in the settings. For any request: contact@inkluo.com.

7. Complaints

If you are in France, you may lodge a complaint with the CNIL: https://www.cnil.fr/fr/plaintes. Otherwise, contact your local data protection authority.

8. Local storage

Inkluo stores session and preference information through the extension storage, on your device. This data is removed when the account or the extension is deleted.

Last updated: [TO COMPLETE: go-live date].