Privacy policy

The controller of the data collected is Josselin Dionisi - Boréales Créations EIRL, registered under number 81167954700018, whose registered office is located at 4 RUE AUBRION, 57290 SEREMANGE-ERZANGE, France.

For any question about the processing of your data, you can contact us at: [email protected].

a. Identification and account data: last name, first name, email address, password (encrypted), profile picture, language, time zone.

b. Data from connected social networks: account identifiers (Facebook, Instagram, X / Twitter, LinkedIn, TikTok, Threads, Bluesky, Google My Business), OAuth access tokens, lists of pages, post metadata. This information is collected only with your explicit consent when you connect an account.

c. User content: texts, images, videos and files uploaded and scheduled through the service, as well as conversations with the AI Chatbot.

d. Billing data: subscription plan, order history, invoices. Payment card data is collected and processed exclusively by our payment providers (Lemon Squeezy and Stripe); Plus Tard never has access to it and does not store it.

e. Technical and connection data: IP address, browser and operating system type, session identifiers, login dates and times, pages viewed, error logs.

f. Cookies and trackers: see the dedicated section below.

Your data is processed for the following purposes:

a. Providing and operating the service (account creation, authentication, scheduling and publishing, operation of the AI Chatbot) — legal basis: performance of the contract.

b. Managing subscriptions and billing — legal basis: performance of the contract and legal obligations (accounting).

c. Improving the service and its security (audience measurement, fraud prevention, debugging) — legal basis: legitimate interest.

d. Communicating with you (service notifications, customer support, product updates) — legal basis: performance of the contract or legitimate interest.

e. Sending marketing communications — legal basis: your consent, which you may withdraw at any time.

f. Complying with our legal obligations (retention of invoices, responses to authorities) — legal basis: legal obligation.

a. Account data: for as long as you are registered, then deleted within 30 days of the account being deleted (unless the law requires otherwise).

b. Published content and publication history: kept while the account is active, then deleted when the account is closed.

c. Conversations with the AI Chatbot: kept for the duration of the subscription, then deleted when the account is closed.

d. Billing data: kept for 10 years in accordance with accounting and tax obligations.

e. Technical data and logs: kept for a maximum of 12 months.

f. Prospecting data: kept for 3 years from the last contact.

Your data may be disclosed to the following recipients, strictly within the limits of the purposes described above:

a. Technical processors: hosting provider, email delivery providers, audience measurement tools.

b. Payment providers: Lemon Squeezy and Stripe, to process transactions.

c. AI providers: OpenAI, to process the requests sent to the AI Chatbot. The data transmitted is limited to what is strictly necessary to generate the answer.

d. Social networks: Facebook (Meta), Instagram (Meta), X, LinkedIn, TikTok, Threads (Meta), Bluesky, Google, when you publish or schedule content through their APIs.

e. Administrative or judicial authorities: upon lawful request, strictly within the framework provided by law.

All our processors are contractually bound to comply with the GDPR and to ensure an appropriate level of security.

Some of our processors (in particular OpenAI, Stripe, Lemon Squeezy or social network operators) may process your data outside the European Union, notably in the United States. In that case, these transfers are subject to appropriate safeguards (European Commission standard contractual clauses, Data Privacy Framework certification or equivalent), in accordance with Articles 44 et seq. of the GDPR.

We implement appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, disclosure, alteration or destruction: password encryption, HTTPS transmission, access control, regular backups, security event logging. As no system is infallible, we cannot however guarantee absolute security.

In accordance with the GDPR and the French Data Protection Act, you have the following rights over your data:

a. Right of access: obtain confirmation that your data is being processed and receive a copy of it.

b. Right to rectification: correct inaccurate or incomplete data.

c. Right to erasure ("right to be forgotten"): request the deletion of your data, under the conditions provided by law.

d. Right to restriction of processing: request the temporary suspension of processing.

e. Right to object: object to processing, in particular for prospecting purposes.

f. Right to data portability: receive your data in a structured format and transmit it to another controller. Plus Tard offers an export of your posts from your personal space.

g. Right to withdraw your consent at any time, where processing is based on it.

h. Right to set post-mortem directives regarding what happens to your data after your death.

To exercise these rights, contact us at [email protected]. We may ask you for proof of identity. You also have the right to lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL — www.cnil.fr).

Plus Tard uses cookies and similar technologies to operate the service, remember your preferences, measure audience and improve your experience.

a. Strictly necessary cookies: essential for the service to work (session, authentication, security). They do not require your consent.

b. Audience measurement cookies: allow us to analyse how the service is used in order to improve it. They are set according to your choices.

c. You can configure or withdraw your consent to cookies at any time via the dedicated banner or your browser settings.

The Plus Tard service is not intended for minors under 15 years of age. If you believe that a minor has provided us with personal data without the consent of their legal guardian, please contact us so that we can delete it.

We may amend this policy to reflect legal, technical or functional changes. The date of the last update appears at the top of the document. Any material change will be notified to you by email or through the service interface.

Plus Tard uses YouTube API Services to publish the videos you schedule on the YouTube channel you connect. By connecting a YouTube channel, you agree to be bound by the YouTube Terms of Service.

a. Data accessed: your channel ID and name, to display it in Plus Tard, and the OAuth tokens issued by Google. Plus Tard does not access your other videos, your comments or your subscribers.

b. Sharing, transfer and disclosure: Google user data (OAuth tokens, channel ID and name) and the videos, titles, descriptions and tags you schedule are shared only with the following recipients:

• Google (YouTube), to which the video and its metadata are sent at publication time, at your request;
• Scaleway (France), our hosting provider, which stores this data on our servers on our behalf and cannot use it for its own purposes.

This data is never sold, rented, used for advertising, shared with our artificial intelligence providers (including OpenAI) or used to train AI models. It is not disclosed to any other third party, unless required by law (request from a judicial or administrative authority).

c. Storage and deletion: tokens and channel information are kept while the channel is connected. When you disconnect the channel in Plus Tard, access is revoked with Google and this data is deleted immediately.

d. Google also processes your data in accordance with its Privacy policy. You can revoke Plus Tard's access to your Google account at any time from the Google security settings page.

e. Plus Tard's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

For any question about this Privacy Policy or to exercise your rights, you can contact us at: [email protected].