Privacy Policy

1. Who is responsible

The data controller is Azizi Mehdi, entrepreneur individuel operating under the trade name Devoria, SIREN 841 307 408, 32 boulevard Capdevila, 84000 Avignon, France. Contact: contact@devoria.fr, 07 68 57 59 53.

2. The data processed, and why

• When you visit the site: technical data (IP address, browser, pages requested) to serve pages, secure the site and fix errors. Analytics and advertising tracking are only enabled with your consent.
• When you buy the iOS Accelerator: name, email address, country and payment information, to collect payment, issue the invoice, send you the welcome email and your access to the course channels. Card details are entered on Stripe and never pass through devoria.fr.
• When you link your Discord account: Discord ID and Stripe transaction IDs, to verify your purchase, assign the Student role and remove that access if the purchase is fully refunded. The Discord login token is only used during activation; it is not stored.
• When you request your plan from the assessment: your email address, first name and assessment answers, to show your result and send you a welcome email with a personal link to pick up where you left off. If you check the optional box, at most two reminders before enrollment closes, never after you buy.
• When you join the waitlist: your email address, to let you know when the next session opens.
• When you leave a review: your first name, initial, profile, rating and text, published after review; your email address, never displayed, is used to verify your purchase with Stripe and to reply to you.
• When you join the Club: name, email address and subscription status at Stripe, to organize your sessions and give you access to managing your subscription.
• When you leave your email address (program, info list): your email address, to send you the program and information about the offer. Every email includes a link to stop receiving anything.
• When you write to us: the content of your message and your contact details, to reply to you.

3. Devoria Studio and your social media accounts

Devoria Studio (studio.devoria.fr) is the private publishing tool reserved for the Devoria team. You log in with Discord: the Studio keeps your Discord ID and name to verify your access.

• What you upload: brands, text, images, videos, drafts and calendar, to prepare your posts. They stay private: only your account can access them.
• When you connect a network (TikTok, Instagram, Facebook, YouTube, LinkedIn or another supported network): the account ID, its name or handle, its profile picture, the permissions you grant and the access tokens issued by the network. Tokens are encrypted on our server, never displayed or shared.
• What the Studio does with it: only publish the content you approved, to the accounts and at the time you chose, then track the post's status. On TikTok, content goes as a draft to your TikTok inbox: you add the music and publish it yourself from the app. The Studio never reads your messages, followers or stats, and this data is never used for advertising.
• AI creation: if you save your own key from an AI provider, your brief and images are only sent to that provider, at your request, and billed to your account with them.
• Disconnecting: "Disconnect" in the Studio immediately deletes the account's tokens and cancels its scheduled posts. You can also revoke access from each network's security settings (authorized apps), and for Google at myaccount.google.com/permissions.

YouTube: the Studio uses YouTube API Services. By publishing to YouTube from the Studio, you agree to the YouTube Terms of Service, and data sent to Google is subject to the Google Privacy Policy. Use of data received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

4. Legal bases

Performance of the contract for buying kits and sessions; consent for non-essential cookies and info emails (you can withdraw it at any time); legitimate interest for site security and error tracking; legal obligation for keeping invoices.

5. Providers with access

• Vercel: site hosting.
• Supabase: database for submitted addresses, assessment answers, reviews and Club subscriptions.
• Stripe: card payments and invoices.
• Klarna: pay in installments, if you choose it. Klarna then processes your data as controller of its own processing, under its privacy policy.
• Resend: sending emails.
• Telegram: internal notification of a new signup or submitted address, read only by Devoria.
• Discord: the public community and the course's private channels. Account linking uses the identify and server-join permissions. By joining, you use Discord under its own terms.
• Sentry: tracking technical errors on the site.
• OVHcloud: hosting for Devoria Studio (server located in the United Kingdom).
• The networks you connect to the Studio: they receive the content you publish there, under their own policies.
• Google Analytics and Meta: analytics and advertising, only if you accept them in the cookie banner.

No data is sold. Several of these providers are based outside the European Union, notably in the United States: these transfers are covered by the Data Privacy Framework or the European Commission's standard contractual clauses.

6. How long

• Buyer data: for the duration of the relationship, then 3 years.
• Invoices: 10 years, as required by law.
• Devoria Studio: login tokens deleted as soon as you disconnect the account; content and publishing history for as long as you have access to the course, then same as buyer data.
• Assessment resume links: 30 days for the current session. A 30-minute technical cookie lets you resume after opening the link.
• Email addresses left without a purchase: 3 years after your last contact.
• Analytics cookies: 13 months at most, as recommended by the CNIL.

7. Your rights

You can request access to your data, its correction, deletion or portability, restriction of processing, or object to it. You can also withdraw your consent and unsubscribe from emails at any time. Write to contact@devoria.fr: you'll get a reply within one month at most. If you think your rights aren't being respected, you can file a complaint with the CNIL at cnil.fr.

8. Cookies

Cookie details and how to change your choice are on the cookies page.