Privacy, plainly.
CHNGMKR is published by in:Expeditions SAS (France). This page tells you what personal data we handle, why, and how to exercise your rights — readable without an account. On a card and not a member? See Are you on the map?
What we collect, and why
- Your account — email, name, optional profile details. To sign you in and keep your lists. Kept until you delete your account (self-service, immediate).
- Messages you send (introduction requests, consultations, briefs) — name, email, your message. To carry your request personally to the right person. Kept up to 12 months after the last exchange, then deleted.
- CHNGMKR+ billing — handled by Stripe; we never see your card number.
- Analytics — only if you accept cookies. Nothing is sent to Google before you say yes.
- AI search — your question is processed to answer it; usage is counted. Answers are generated by Claude (Anthropic) and can be imperfect.
Who processes data for us
| Processor | Role | Location |
|---|---|---|
| Supabase | Accounts & database | US company — EU/US region, DPA |
| Netlify | Hosting & form storage | USA — DPF/SCC |
| Stripe | Payments | USA — DPF/SCC |
| Resend | Transactional email | USA — DPF/SCC |
| Anthropic | AI search & drafts | USA — DPF/SCC |
| Analytics (opt-in only) | USA — DPF/SCC |
Transfers outside the EU rely on the EU–US Data Privacy Framework or Standard Contractual Clauses. The full, binding policy (French version prevails) is available in the app's legal notice.
Your rights
Access, rectification, erasure, portability, objection and restriction (art. 15–21 GDPR). Write to privacy@chngmkr.com — we answer within 30 days. Members can delete their account and download their data directly from their account panel. Complaints: CNIL (cnil.fr).
Version française (elle fait foi)
CHNGMKR est édité par in:Expeditions SAS. Données traitées : compte (email, nom — jusqu'à suppression du compte), messages envoyés (conservés 12 mois après le dernier échange), facturation CHNGMKR+ (via Stripe, nous ne voyons jamais votre carte), mesure d'audience (uniquement après acceptation des cookies — rien ne part vers Google avant), recherche IA (réponses générées par Claude, Anthropic).
Sous-traitants : Supabase (comptes et base), Netlify (hébergement et formulaires), Stripe (paiement), Resend (emails), Anthropic (IA), Google (audience, opt-in). Les transferts hors UE s'appuient sur le Data Privacy Framework UE-États-Unis ou les clauses contractuelles types.
Vos droits (art. 15-21 RGPD) : accès, rectification, effacement, portabilité, opposition, limitation — privacy@chngmkr.com, réponse sous 30 jours. Réclamation : CNIL (cnil.fr). La politique complète et opposable vit dans les mentions légales de l'application ; la version française fait foi.