Privacy Policy
1. Data controller
- Controller: Yann Mennesson, sole trader (individual entrepreneur), trading as "Le Grimoire" (the software) and "Karasumei" (publishing brand)
- SIRET: 798 871 604 00038
- Address: 35 rue de l'Abbé Darras, 60150 Longueil-Annel, France
- Contact: [email protected]
2. Data collected
We collect only the data strictly necessary for the commercial relationship:
| Data | Purpose | Retention period |
|---|---|---|
| Email address | Licence delivery, customer support, account-related communications | Term of the contract + 3 years |
| First and last name | Identification of the licence holder | Term of the contract + 3 years |
| Order history | Licence management, billing, legal obligations | 10 years (accounting requirement) |
| Generated licence key | Software activation and verification | Term of the contract |
3. Payment data
The sale is carried out by our reseller (Merchant of Record) Polar Software, Inc. (Dover, Delaware, USA); card payments are processed by its sub-processor Stripe, Inc. Banking details (card number, etc.) never pass through our servers and are never stored by us.
Polar has its own privacy policy, available at polar.sh/legal/privacy.
4. Data hosting
Account data is hosted on OVH SAS servers located in France (Roubaix). No data is transferred outside the European Union by the publisher, with the exception of data processed by Polar Software, Inc. and Stripe, Inc. (United States, covered by the European Commission's standard contractual clauses).
5. Use of the AI service (optional)
If you use the AI service via our servers (VPS subscription or request packs):
- Your requests pass through our VPS in order to be forwarded to the AI provider (DeepSeek or equivalent).
- We retain only a counter of the requests used, without recording the content of the exchanges.
- If you use your own API key (BYOK), your requests do not pass through our servers and are governed by your AI provider's policy.
6. Your rights (GDPR)
In accordance with the GDPR, you have the following rights:
- Right of access: obtain a copy of your personal data.
- Right to rectification: correct inaccurate data.
- Right to erasure: request the deletion of your data.
- Right to portability: receive your data in a structured format.
- Right to object: object to the processing of your data.
- Right to restriction: temporarily restrict the processing.
To exercise these rights, contact us at [email protected]. We will respond within a maximum of 30 days.
In the event of an unresolved complaint, you may refer the matter to the CNIL (the French data protection authority): www.cnil.fr
7. Cookies
The website uses only technical cookies necessary for the operation of the service:
- Session cookie (authentication, cart).
- Language preference.
No advertising, tracking or profiling cookie is placed. No third-party analytics tool (Google Analytics, etc.) is used.
8. Amendments
This policy may be updated. In the event of a substantial change, users with an active account will be informed by email with 30 days' notice. The update date is shown in the document header.
Retour à l'accueil