Privacy Policy

Last updated: January 2025

Introduction

This privacy policy explains how SENSOTED (publisher of MetaDevProfile) collects, uses, shares and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable French legislation.

Data Controller

The data controller of personal data is:

SENSOTED

2275 CHEMIN DE LA DOUDONNE, 13100 AIX-EN-PROVENCE, France

SIREN: 980 343 933

Email: legal@metadevprofile.com

Data Protection Officer: legal@metadevprofile.com

Data Collected

For professionals:

• First and last name
• Email address
• Phone number
• Complete billing information (address, SIRET, company)
• Connection and usage data

For patient files:

• First and last name
• Email address and contact phone number
• Gender
• Medical data necessary for evaluation (encrypted)

Technical data:

• IP address
• Browser information
• Navigation data
• Connection logs

Legal Basis for Processing

The processing of your personal data is based on:

• Contract execution for providing MetaDevProfile services
• Consent for certain specific treatments
• Legitimate interest for security and service improvement
• Legal obligation for billing data retention

Data Usage

Your data is used to:

• Provide and maintain MetaDevProfile services
• Manage your account and billing
• Improve our services
• Ensure platform security
• Comply with our legal obligations
• Communicate with you regarding our services

Data Sharing

We do not sell your personal data. Your data may be shared with:

• Supabase (secure hosting in Europe)
• RevenueCat (subscription management)
• Stripe, Apple, Google (payment processing)
• Competent authorities if required by law

All our partners are bound by confidentiality and data protection agreements.

Storage and Security

Data location:

Your data is stored on Supabase servers hosted in Europe, compliant with European regulations.

Security:

All data is encrypted. Sensitive information (patient files) is encrypted with AES-256-CBC.

Retention:

Your data is retained until your deletion request or for a maximum of 1 year for billing data.

Cookie Policy

We only use cookies strictly necessary for the proper functioning of the application (authentication, security).

Types of cookies used:

• Session cookies (authentication)
• Security cookies (CSRF protection)
• Preference cookies (language, theme)

We do not sell your browsing data and do not use advertising cookies.

Your Rights

In accordance with GDPR, you have the following rights:

• Right of access: view your personal data
• Right of rectification: correct your data
• Right of erasure: delete your data
• Right to portability: retrieve your data
• Right of objection: object to processing
• Right to limitation: limit processing

Exercise your rights:

To exercise your rights, contact us at contact@metadevprofile.com or from your personal space.

We commit to responding to your requests within one month.

Right to complaint:

You have the right to file a complaint with the CNIL (www.cnil.fr) if you believe your rights are not being respected.

Data Transfers

Your data may be transferred outside the European Union only to countries offering an adequate level of protection or with appropriate safeguards.

Applied safeguards:

• Standard contractual clauses approved by the European Commission
• Recognized security certifications
• Data protection agreements

Minor Protection

MetaDevProfile is intended for adult professionals with business registration. We do not knowingly collect data from minors.

Policy Changes

This policy may be modified to reflect changes in our practices or legislation.

You will be informed of any significant changes by email or notification in the application.

Changes take effect upon publication on this page.

Contact

For any questions regarding this privacy policy:

Email: legal@metadevprofile.com

Address: 2275 CHEMIN DE LA DOUDONNE, 13100 AIX-EN-PROVENCE, France

Data Protection Officer: legal@metadevprofile.com