Politique de confidentialite

Data Controller

Djedi is the data controller responsible for your personal data. We determine the purposes and means of processing your personal information.

Data Protection Contact

contact@djedi.dev

Data We Collect

Account Information

Email address (required for account creation)
Name (optional, for personalization)
Profile picture (if using OAuth providers)

Usage Data

Architecture generation history and prompts
Feature usage patterns and preferences
Subscription and billing information

Technical Data

IP address and approximate location
Browser type and device information
Session data for authentication

No Sensitive Data

We do not collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data.

Purpose of Processing

We process your data for the following purposes:

Providing and improving our services
User authentication and account management
Processing payments and managing subscriptions
Sending service-related communications
Analyzing usage to improve the platform

Legal Basis (GDPR)

We process your personal data based on the following legal grounds:

Contract Performance: Processing necessary to provide you with our services
Legitimate Interests: Improving our services, preventing fraud, ensuring security
Consent: For optional features like marketing communications
Legal Obligation: Compliance with applicable laws and regulations

Data Security

We implement robust security measures to protect your data:

AES-256 encryption for data at rest
TLS 1.3 encryption for data in transit
Regular security audits and penetration testing
Access controls and authentication mechanisms
Secure cloud infrastructure (AWS EU regions)

International Data Transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place for international transfers.

For transfers outside the EU/EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized mechanisms.

Your Rights

Under GDPR and applicable data protection laws, you have the following rights:

Right of Access

Request a copy of your personal data

Right to Rectification

Request correction of inaccurate data

Right to Erasure

Request deletion of your personal data

Right to Data Portability

Receive your data in a structured, machine-readable format

Right to Object

Object to processing based on legitimate interests

To exercise any of these rights, contact us at contact@djedi.dev. We will respond within 30 days.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to opt-out of the sale of personal information
Right to non-discrimination for exercising privacy rights

We do not sell your personal information to third parties.

Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, or as required by law. Account data is retained for the duration of your account plus a reasonable period for legal compliance.

Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required for legal purposes.

Cookies & Tracking

We use minimal cookies necessary for the service:

Essential Cookies: Required for authentication and security
Functional Cookies: Store your preferences (language, theme)

We do not use third-party tracking cookies or advertising cookies. We do not share data with advertising networks.

Contact & Complaints

For privacy-related questions or to exercise your rights: