Sonocrea
FREN Try it free

GDPR

Privacy policy

This policy describes the personal data processing carried out by Sonocrea for the marketing site sonocrea.com and the application app.sonocrea.com.

Data controller

[Company name], [address]. Contact: contact@sonocrea.com. [Data protection officer, if appointed]

Data collected

  • Account: email address, first name, interface language, encrypted password or authentication provider identifier.
  • Usage preferences: chosen intentions, durations, themes, audio settings, favourites and session history.
  • Subscription: status, plan and dates. Card data never passes through our servers — it is handled directly by Stripe.
  • Analytics: aggregated browsing data, only after consent.

Purposes and legal bases

  • Service delivery and account management — performance of the contract.
  • Session personalisation — performance of the contract.
  • Billing and accounting obligations — legal obligation.
  • Analytics and marketing communications — consent, revocable at any time.

Retention

  • Account data: for the life of the account, then 12 months after closure.
  • Billing data: 10 years, per accounting obligations.
  • Analytics data: 13 months maximum.

Recipients and processors

Data is accessible only to authorised staff and to the processors required to run the service: application hosting, audio storage, payment (Stripe), voice synthesis, transactional email. Each is bound by a processing agreement compliant with Article 28 GDPR. No data is sold.

Transfers outside the EU

Primary storage is located in the European Union. Where a processor operates outside the EU, the transfer is covered by the European Commission's standard contractual clauses. [Complete the list of processors and their locations]

Your rights

You have rights of access, rectification, erasure, restriction, objection and portability. Write to contact@sonocrea.com with "GDPR" in the subject line. You will receive a reply within one month. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

Cookies

The marketing site uses strictly necessary cookies only. The application uses analytics cookies after consent. Consent is requested on first access and can be changed at any time from the application settings.

Health data

Sonocrea deliberately collects no health data within the meaning of Article 9 GDPR. The intentions you choose (sleep, stress, focus) are treated as usage preferences and constitute neither a diagnosis nor a health record. In professional settings, the dashboards provided are anonymised and aggregated.

Last updated: [go-live date]