Privacy policy
Last updated: 31 August 2026
1. Data controller
The data controller is Kevin Giordani, acting under the trade name Sarox. Contact: contact@sarox.fr.
2. Data we collect
Depending on the services you use, we may process:
- Email and, where applicable, your app account
- Payment data processed by Stripe (Sarox does not store card numbers)
- Website usage data (page views, clicks, journeys) via PostHog, hosted in the EU
- Technical error data via Sentry
- Language preference (i18next cookie)
- Messages you send us (support)
3. Purposes and legal bases
We process this data to provide the service and subscription (performance of a contract), measure audience and improve the product (legitimate interest), meet legal obligations (accounting, tax), and reply when you contact us.
4. Recipients
Your data is shared only with providers needed to run the service: Stripe (payments), Vercel (website hosting), PostHog (analytics, EU), Sentry (errors), and our API host. They use this data only to provide their service to us.
5. Retention
Account and subscription data is kept while the account is active, then for as long as legal obligations require. Analytics data is kept according to the PostHog project configuration. You can ask us to delete your account at contact@sarox.fr or through the dedicated page.
Delete an account6. Cookies
The site uses a language cookie and cookies / storage needed by PostHog to measure audience. These tools help us understand how the site is used. You can limit some trackers in your browser settings.
7. Your rights
Under the GDPR, you can request access, rectification, erasure, restriction, portability, and object to certain processing. Write to contact@sarox.fr. You can also lodge a complaint with the CNIL (cnil.fr).
8. Mobile app
The mobile app has its own policy, including for training data stored on the device.
Mobile app privacy policy9. Children
Sarox services are intended for people aged 13 or over. We do not knowingly collect data from children under 13.
10. Changes
This policy may be updated. The date at the top of the page is authoritative. Material changes will be indicated on the site.