Privacy Policy
1. Summary
ConvertPalms is built so that your invoice content stays in your browser. It is never uploaded to or stored on our servers. The only personal data we touch is what you provide if you create an account, contact us, or upload a logo (which is auto-deleted within an hour). This policy explains exactly what happens.
2. Who we are
Data controller: Palms Sky Conv, based in Saint-Paul, Réunion, France.
Postal address: 30 T Route du Vieux Flamboyant, Saint-Gilles-Les-Hauts, 97460 Saint-Paul, Réunion, France · Email: [email protected]
3. What data we collect
3.1 Data that stays in your browser only
- Your invoice content (line items, customer details, totals, notes) — saved to your browser's localStorage. We do not see it.
3.2 Data you actively send us
- Logo upload: the image file is sent to our server, resized, and auto-deleted within one hour. We do not retain a copy.
- Account data (only if you sign up for the optional Pro tier): email, name, password (hashed), or your Google profile if you sign in with Google.
- Billing data (Pro): handled by Stripe; we never store full payment-card numbers.
- Communications: messages you send to support.
3.3 Data collected automatically
- Server logs: IP, user-agent, request path, status, timestamp — kept 30 days for security.
- Cookies & similar: see our Cookie Policy.
4. Why we use your data
| Purpose | Categories used |
|---|---|
| Generate the PDF you request | Invoice content, logo (transient) |
| Authenticate you (Pro) | Account |
| Process payments (Pro) | Billing |
| Service emails (receipts, alerts) | Account, billing |
| Detect & prevent abuse | Server logs |
| Comply with legal obligations | Account, billing, logs |
5. Legal basis (GDPR Art. 6)
- Performance of a contract — to provide the Service you request.
- Legitimate interests — to keep the Service secure and prevent abuse.
- Consent — for non-essential cookies and any marketing email.
- Legal obligation — for tax/accounting and lawful requests.
6. Sharing & processors
We do not sell your personal data. We share it only with the categories of recipients below, all bound by written data-processing agreements:
| Recipient | Purpose | Location |
|---|---|---|
| Cloud hosting provider | Run our servers, briefly hold your logo | EU |
| Stripe, Inc. | Process payments (Pro) | US (with EU SCCs) |
| Google LLC | OAuth sign-in (only if you choose it) | US (with EU SCCs) |
| Cloudflare, Inc. | DNS, DDoS protection, CDN | Global |
| Email provider | Transactional email | EU |
We may also disclose data when legally required, or to protect our rights and the safety of others.
7. How long we keep data
| Data | Retention |
|---|---|
| Invoice content | Stays in your browser; deleted whenever you clear it |
| Logo upload | ≤ 1 hour, auto-deleted |
| Account data (Pro) | Until you delete your account |
| Billing records | Up to 7 years (legal/tax obligation) |
| Server access logs | 30 days |
8. Security
TLS 1.2/1.3 in transit, hardened systemd service, isolated processing, role-based access. We notify affected users and the relevant authority within 72 hours of becoming aware of a personal-data breach where required by law.
9. International data transfers
Where personal data leaves the EEA / UK, we rely on the European Commission's Standard Contractual Clauses (Decision 2021/914) and the UK International Data Transfer Addendum.
10. Your rights
You may access, rectify, erase, restrict, or object to processing of your data, withdraw consent, request portability, and lodge a complaint with your local data-protection authority. Email [email protected]; we respond within 30 days.
Californians: we do not sell or share personal information for cross-context behavioural advertising under the CCPA/CPRA.
11. Children
ConvertPalms is not directed at children under 16. We do not knowingly collect personal data from minors.
12. Changes
Material changes will be announced by email or in-app notice 14 days before they take effect.
13. Contact
Questions or complaints? [email protected] or by post: Palms Sky Conv, 30 T Route du Vieux Flamboyant, Saint-Gilles-Les-Hauts, 97460 Saint-Paul, Réunion, France.