Privacy Policy

1. Introduction

Madeleine Agency (hereinafter "we", "our", or "us") is committed to protecting the privacy and security of its users' personal data. This privacy policy explains how we collect, use, share, and protect your personal information.

This policy complies with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

2. Data Controller

3. Data Collected

3.1 Identification Data

• When creating an account: email address, password (encrypted), first name, last name.
• Profile information: company, industry, company size, use case.

3.2 Billing Data

• Payment information (processed by Stripe — we do not store card numbers).
• Transaction history and invoices.
• Billing address.

3.3 Usage Data

• Templates and creations generated, along with their parameters (brief, style, colours).
• Images uploaded to the library, CRM contacts, forms.
• Generation history and credit consumption.
• Favourites and user preferences.

3.4 Technical Data

• IP address, browser type, operating system.
• Pages visited, visit duration, clicks.
• Connection and error logs.
• Cookies (see our cookie policy for details).

4. Purposes of Processing

We use your personal data for: service delivery, billing, transactional and marketing communications (with consent), service improvement, security, and legal compliance.

5. Legal Basis for Processing

• Performance of a contract: to provide the requested service.
• Legitimate interests: to improve our service and secure our systems.
• Consent: for marketing communications and analytics tracking.
• Legal obligation: for accounting and tax reporting purposes.

6. Data Sharing and Transfers

We engage technical sub-processors to operate the service. Each sub-processor is bound by contractual data protection obligations.

These services comply with the GDPR or are covered by Standard Contractual Clauses (SCCs) issued by the European Commission.

6a. Use of AI and Data Processing

MarketingAtelier uses artificial intelligence to deliver certain features. It is important that you understand how your data interacts with these systems.

AI functions that use your data

• Content generation: information from your brief (subject, tone, objective) and your design system (colours, fonts) is sent to Maia to generate personalised content.
• Lead scoring: Maia analyses the behavioural data of your CRM contacts (opens, clicks, forms) to assign a score and suggest actions.
• Suggestions and strategies: Maia may access your contacts' interaction history to recommend the best actions to take.

7. Retention Periods

• Account data: for the duration of your subscription plus 3 years.
• Billing data: 10 years (legal obligation).
• Technical logs: 12 months maximum.
• Marketing data (with consent): until consent is withdrawn.

8. Your Rights (GDPR)

You have rights in relation to your personal data: access, rectification, erasure, objection, restriction, portability, and withdrawal of consent at any time.

9. Data Security

HTTPS / TLS encryption on all communications, hashed passwords, API keys and tokens encrypted with AES-256-GCM at rest, access restricted by row-level security (RLS), regular backups, 24/7 monitoring.

10. Contact