Privacy Policy

Who we are

Supadeck is published by Laurane Boulenger (Entrepreneur individuel (micro-entreprise) — profession libérale non réglementée), based at 537 avenue de la Justice de Castelnau, 34090 Montpellier, France. For anything related to your data, the data controller is Laurane Boulenger, reachable at hello@supadeck.app. Full identity details are on our Legal Notice.

What we collect

• Account data — your email address, and your name if you sign in with Google. We use passwordless sign-in (a login link sent by email, or Google sign-in), so we never store a password.
• What you tell us to build your deck — depending on the deck you order, this is either a short topic you type in, or your answers to the "First Conversation" questionnaire (things like your first name, where you live, your work, your family, your routine, your hobbies and the everyday situations you want to practise). This is personal information about your life, and it exists only to generate sentences that are actually about you — see "Who we share it with" below for how it is processed.
• Payment data — handled entirely by our payment provider, Creem, acting as Merchant of Record. We never see or store your card details; we only receive confirmation that an order has been paid.
• Messages you send us — anything you write to us by email, so we can reply.
• Technical data — basic server logs (such as IP address and browser type) and product-analytics events (which pages and features you use) needed to keep the site secure, working, and improving.

Why we use it, and our legal basis

• To generate the deck you ordered — performance of our contract with you. This is the only reason we ask for your topic or questionnaire answers.
• To provide your account and let you download your decks — performance of our contract.
• To take payment — performance of our contract.
• To reply to your messages and support requests — our legitimate interest in helping you.
• To keep the service secure, fix problems and understand how the product is used — our legitimate interest.

Who we share it with

We do not sell your data. Generating a deck is not something we can do by ourselves — it relies on a small number of trusted providers who process data on our behalf, under contract and only as needed to run Supadeck. In particular, the topic or questionnaire answers you provide are sent to the AI providers below so they can write and translate the sentences and audio in your deck.

Some of these providers are based in the United States. Where data is transferred outside the European Union, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses. We do not use your data to train any AI model.

Cookies and tracking

We use essential cookies needed to sign you in and keep your session secure. We also use PostHog to understand how the site is used (page views, clicks, session replay) and improve it. As of the date above we run no advertising and no advertising pixel on the site.

How long we keep it

We keep your account and questionnaire data for as long as your account is open. You can delete a saved profile's questionnaire answers at any time from your profiles, without deleting your account. You can also delete your account entirely at any time from your Account settings: this permanently deletes your questionnaire answers and deck profile, and anonymises your account (your email is replaced and your name removed), while we keep the minimal billing records Creem requires us to retain to meet legal obligations. Messages you send us are kept only as long as needed to handle your request.

Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• ask us to correct anything that is wrong;
• ask us to delete your data;
• receive your data in a portable format;
• object to, or ask us to restrict, certain processing.

To exercise any of these, email us at hello@supadeck.app. If you believe we have not handled your data properly, you have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), the French data-protection authority.

Changes to this policy

We may update this policy as the platform evolves. When we do, we will change the "last updated" date above, and for significant changes we will let you know.