Last updated: November 11, 2026. This policy explains which personal data AIgocratie collects, why, how long it is kept and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Data controller

[COMPANY NAME], [ADDRESS], publisher of the site (see the Legal notice). Contact for any question about your data: [PERSONAL DATA E-MAIL] or the Contact page (topic "Personal data"). [If applicable: contact details of your data protection officer (DPO).]

2. Data collected, purposes and legal bases

PurposeDataLegal basis
Account creation and management, sign-inName, e-mail, password (stored hashed, never in clear), language, optional avatar, optional bioPerformance of the contract (Terms)
Sign-in with Google, Facebook or XAccount identifier at the provider, name and e-mail sent by it. No access token is kept.Performance of the contract, at your request
Account securityTwo-factor secret (encrypted), recovery codes (hashed), last sign-in dateLegitimate interest (protecting accounts)
Subscription, payment, invoicingPlan, dates, amounts, invoices, transaction identifiers. Card details are entered directly at Stripe or PayPal: we never have access to them.Performance of the contract; legal obligation (accounting)
NewsletterE-mail, name, language, confirmation date; e-mail opens and clicks, to measure interestConsent (double opt-in by e-mail), which you can withdraw at any time
Reading statisticsArticles read, date, full reading of a Premium article, linked account if anyLegitimate interest (improving content, measuring audience)
PollsChosen answer and an anonymous voter identifier (non-reversible hash); no IP address is storedLegitimate interest (preventing multiple votes)
Contact formName, e-mail, subject, messageLegitimate interest (answering your request)
Advertising space ordersCompany, contact name, e-mail, phone, ad creative and textPerformance of the contract
Ad network advertising (e.g. Google AdSense)Advertising cookies and identifiersConsent (cookie banner), for non-subscribers only
Proof of your consentsType of consent, Terms version, date, IP address at the time of consentLegal obligation (demonstrating consent)

Articles are written by artificial intelligence from topics chosen by the newsroom or from public news wires: no readers' personal data is sent to AI providers (Anthropic, OpenAI).

3. Recipients and processors

Your data is intended for the AIgocratie team, according to each member's rights, and for our processors, solely for the needs of the service:

  • Hosting: [HOSTING PROVIDER, COUNTRY];
  • E-mail delivery: [SMTP PROVIDER, COUNTRY];
  • Payment: Stripe (Ireland / USA), PayPal (Luxembourg);
  • Social sign-in, at your initiative: Google, Meta (Facebook), X;
  • Advertising, after consent: Google (AdSense) [or the ad network used];
  • Technical resources loaded by your browser, which receive your IP address: Google Fonts (Google), jsDelivr and cdnjs libraries (Cloudflare).

We never sell your data.

4. Transfers outside the European Union

Some providers (Stripe, Google, Meta, X, Cloudflare) may process data in the United States. These transfers are covered by the EU–US Data Privacy Framework for certified companies, or by the European Commission's standard contractual clauses.

5. Retention periods

  • Account: as long as it is active. An account never confirmed by e-mail is deleted after 7 days.
  • Invoices and accounting data: 10 years (legal obligation), even after account deletion, detached from it.
  • Reading statistics and contact messages: 2 years, then automatic deletion.
  • Newsletter: until you unsubscribe.
  • Proof of consent: for the duration of the relationship, then 5 years.
  • Advertising orders: duration of the business relationship, then 5 years; invoices 10 years.

6. Cookies and trackers

NamePurposeDuration
Session cookieKeep you signed in and keep your checkout (essential)End of session
XSRF-TOKENProtect forms against request forgery (essential)End of session
remember_web_…"Remember me" option at sign-inUp to 400 days
localeRemember your languageUp to 400 days
cookie_consentRemember your cookie choice6 months
poll_voterPrevent voting twice in the same poll (random identifier)2 years
theme (local storage)Remember light or dark themeUntil cleared
Ad network cookiesAdvertising, only if you click "Accept all"Set by the network (13 months maximum)

Essential cookies do not require your consent. You can change your choice at any time by clearing the site's cookies in your browser: the banner will appear again. Stripe and PayPal set their own cookies on their payment pages.

The installable app (PWA) keeps a copy of public pages you have already read on your device for offline reading; pages of your personal area are never stored.

7. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, the right to withdraw your consent at any time and to set instructions for your data after your death. Directly from your account:

  • My account > Privacy: export your data (JSON file) or permanently delete your account;
  • My account > Profile: correct your information;
  • the unsubscribe link in every newsletter.

For any other request, write to [PERSONAL DATA E-MAIL]: we answer within one month. If you believe your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr) or your local supervisory authority.

8. Security

Encrypted connection (HTTPS), hashed passwords, optional two-factor authentication, encrypted keys and secrets, sign-in attempt limits, data access restricted by team roles.

9. Minors

The site is intended for a general audience. Subscriptions are reserved for adults or persons authorised by their legal guardian. Under French law, a minor under 15 cannot alone consent to the newsletter or advertising cookies.

10. Changes

This policy may change. The update date is shown at the top of the page; in case of significant change, we inform you by e-mail or by a message on the site.