1 Data Controller
Aurélien Dasquié (sole proprietorship, registration in progress)
France
Email: contact@boltcore-engineering.com
For any question about this policy or to exercise your rights (see Section 5), contact us at the address above.
2 Data We Collect
- Account data: name, email address, password (encrypted), subscription status.
- Billing data: processed entirely by Stripe; BoltCore does not store card numbers. We retain subscription status and invoice references only.
- Calculation data: input parameters, saved configurations, and generated PDF reports, associated with your account.
- Contact form data: name, email, subject, and message content, submitted via our contact form (processed by Formspree).
- Usage data: pages visited, browser type, approximate location, collected via Google Analytics cookies.
3 Purposes & Legal Basis
- Providing the Service (account, calculations, PDF export) — necessary for contract performance.
- Billing and subscription management — necessary for contract performance and legal obligations (invoicing).
- Responding to contact requests — legitimate interest / consent.
- Analytics and Service improvement — legitimate interest, subject to your cookie preferences where required by law.
4 Recipients & Data Transfers
Your data may be shared with the following processors, strictly for the purposes described above:
- Stripe (payment processing) — may transfer data outside the EU under Stripe's Standard Contractual Clauses.
- Formspree (contact form delivery) — may process data outside the EU under its own data protection safeguards.
- Google Analytics (usage analytics) — may transfer data outside the EU under Google's Standard Contractual Clauses.
We do not sell personal data to third parties.
5 Your Rights
Under the GDPR, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to its processing. To exercise these rights, contact us at contact@boltcore-engineering.com. We will respond within one month.
If you believe your rights are not respected, you may lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr.
6 Cookies
The Service uses Google Analytics cookies to measure audience and usage patterns. A cookie consent banner is displayed on your first visit, allowing you to accept or decline analytics cookies. Analytics cookies are only set if you accept; declining keeps analytics disabled for your session. You can change your choice at any time by clearing your browser's local storage for this site, or by adjusting your browser's cookie settings directly.
7 Data Retention
- Account and calculation data: retained for the duration of your account, plus 3 years after account closure for legal/accounting purposes.
- Billing records: retained as required by French accounting law (typically 10 years).
- Contact form submissions: retained for 2 years.
- Analytics data: retained per Google Analytics' default retention settings.
8 Security
We take reasonable technical and organizational measures to protect your data, including encrypted passwords and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9 Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email or a notice on the Service.