Privacy Policy
This policy explains how AfterSentry processes personal data in the context of the site, diagnostics, the user space, and Guard+.
1. Data Controller
The data controller is the operator of AfterSentry, identified in the Legal Notices. For any questions regarding personal data: the AfterSentry contact form.
2. Processed Data
Depending on the functions used, AfterSentry may process: account identity and contact details, email address, connection and security data, information related to purchases, merchants, amounts, dates, subscriptions, deliveries, warranties and refunds, imported documents and evidence, voluntarily entered content, billing and subscription data, support requests, privacy preferences, and technical data necessary for the service to function.
3. Purposes and Legal Bases
- Service provision and account management: performance of the contract or pre-contractual measures.
- Management of Guard+, payment, billing, and subscription: performance of the contract and compliance with legal obligations.
- Support, security, abuse prevention, and technical logging: legitimate interest in securing and administering the service, subject to individual rights.
- Compliance with legal, accounting, tax, and consumer obligations: legal obligation.
- Analytics and non-strictly necessary marketing: consent when required.
4. Gmail and imports
The Gmail connection is optional. When you choose to activate it, only the data necessary for the requested functions will be processed. You can use AfterSentry without connecting Gmail by manually adding a purchase, document, or relevant content.
5. Recipients and Processors
Data is accessible to authorized persons and service providers strictly necessary for the service. Commerce and subscriptions use Shopify, among others. Authentication, the database, and certain application functions use Supabase; the main project is currently deployed in the eu-west-3 European region. Other providers may be involved for email, authentication, hosting, or functions expressly activated by the user.
6. Transfers outside the European Economic Area
Some international providers may process data from countries located outside the European Economic Area. When this applies, AfterSentry relies on the transfer mechanisms and safeguards provided by applicable regulations and contracts concluded with the concerned providers.
7. Data Retention
Data is kept for the time necessary for the purposes described above and, where applicable, for the periods imposed by legal obligations or necessary for the defense of rights. Accounting documents and supporting evidence are kept for the applicable legal periods. Data unnecessary for the operation of the service must be deleted or anonymized when they are no longer needed.
8. Your Rights
Under the conditions of the GDPR, you may request access to, rectification, erasure, restriction, or portability of your data, as well as object to certain processing. When processing is based on consent, it may be withdrawn at any time without calling into question the lawfulness of previous processing.
To exercise your rights: the AfterSentry contact form. Proof of identity may be requested only if necessary to avoid disclosure to a third party.
You may also lodge a complaint with the CNIL.
9. Cookies and Trackers
Strictly necessary cookies may be used without consent when they are essential for the requested operation. Non-essential trackers should only be activated according to the choices expressed in the cookie manager. You can modify your preferences at any time via the "Manage cookies" link.
10. Security
AfterSentry implements technical and organizational measures aimed at protecting data against unauthorized access, loss, alteration, or disclosure. However, no service connected to the Internet can guarantee zero risk.
11. Modifications
This policy may be updated to reflect changes in the service, providers, or regulations. The version published on this page is the applicable version.