Privacy Policy

Last updated: [DD Month YYYY]

This policy explains how Boube ("we") collects, uses and protects your personal information, in accordance with Quebec's Law 25 and other applicable Canadian laws.

1. Privacy officer

The person responsible for personal information protection is [Officer name], reachable at [privacy@example.com].

2. Information we collect

• Account: email address and display name (managed via Supabase Auth).
• Newsletter: email address, preferred language and consent date.
• Subscription: payment is processed by Stripe. We never store your card number, only a customer identifier, the subscription status, the card brand and the last 4 digits.
• Technical data: functional cookies and server logs (IP address, browser type).

3. Purposes

To provide and secure the service, manage accounts and subscriptions, and send the newsletter to those who consented.

4. Consent

Newsletter sign-up uses double opt-in (email confirmation). You can withdraw consent at any time via the unsubscribe link in every email.

5. Cookies

We use only strictly necessary cookies: lang (language), theme (light/dark) and the authentication session cookie. No advertising cookies or third-party trackers, so no consent banner is required.

6. Partners and processors

We rely on: Supabase (database and authentication), Stripe (payments), Resend (email delivery) and Vercel (hosting). These providers may process data outside Quebec, including in the United States.

7. Retention

Account and subscription data are kept while the account is active; newsletter addresses until unsubscribe; data required by legal or accounting obligations for the period prescribed by law.

8. Your rights

You may request access, correction or deletion of your information, withdraw consent and unsubscribe. To exercise these rights: [privacy@example.com]. You may also file a complaint with the Commission d'accès à l'information du Québec.

9. Security

We apply reasonable measures: encryption in transit (HTTPS), access control and row-level security (RLS) at the database layer.

10. Changes

This policy may be updated; the date shown above reflects the latest version.