Privacy Policy

1. Who is responsible for your data

The data controller for boxed.ink is Dev Engine, a French sole proprietorship (entrepreneur individuel) operated by Alexandre Guillôme.

• Trading name: Dev Engine
• Legal representative: Alexandre Guillôme
• SIREN: 911 591 691
• SIRET: 911 591 691 00041
• VAT number: FR56911591691
• Contact email: alexandre.guillome@yucatech.fr

2. What personal data we collect

We collect and process the following categories of data:

• Account data: your name, email address and profile picture, provided by Google when you sign in with Google OAuth.
• Profile and content data: the text, links, images and other content you add to your boxed.ink page(s).
• Technical data: IP address, browser type, device information and usage data collected automatically when you use the Service, including through cookies (see Section 7).

3. Why we process your data

• To create and manage your account (contract performance).
• To provide, operate and maintain the Service, including hosting your public page(s).
• To communicate with you about service updates, security or support requests.
• To detect, prevent and address fraud, abuse or technical issues (legitimate interest).
• To comply with our legal and accounting obligations.

4. Who we share your data with

We do not sell your personal data. We share data only with service providers ("subprocessors") strictly necessary to operate boxed.ink, and only to the extent required:

• Google – authentication (Sign in with Google).
• Vercel – application hosting and infrastructure.
• MongoDB – database storage of your account and content data.

Some of these providers may process data outside the European Economic Area. Where this is the case, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) as required by GDPR. We may also disclose data if required to do so by law or to protect our rights.

5. How long we keep your data

We retain your account and content data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we are required to keep certain information (e.g. billing records) to comply with legal, accounting or tax obligations, typically for up to 10 years for invoicing data.

6. Data security

We implement commercially reasonable technical and organisational measures to protect your data against loss, theft, unauthorised access, disclosure, alteration or destruction. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies

We use essential cookies required for authentication and the core functioning of the Service. We may also use analytics cookies to understand how the Service is used and improve it. You can control cookies through your browser settings; note that blocking essential cookies may prevent you from signing in or using certain features.

8. Your rights under GDPR

If you are located in the EEA or UK, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority (in France, the CNIL – www.cnil.fr).

To exercise any of these rights, contact us at alexandre.guillome@yucatech.fr. We will respond within one month as required by GDPR.

9. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. External links

Our website may link to external sites that are not operated by us. We have no control over the content and practices of these sites and cannot accept responsibility or liability for their respective privacy policies.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact us

For any question about this Privacy Policy or how we handle your personal data, contact Dev Engine / Alexandre Guillôme at alexandre.guillome@yucatech.fr.