Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data is:

2. Data Collected

We collect the following personal data as part of the operation of the Site:

3. Purposes of Processing

• Providing and operating the cutting optimization service
• Managing user accounts and authentication
• Processing payments and managing subscriptions
• Responding to issue reports and support requests
• Ensuring the security and integrity of the Site
• Improving the Site and user experience

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract performance: processing necessary to provide the service you have subscribed to
• Consent: for optional features such as social login (Google OAuth) and non-essential cookies
• Legitimate interest: for site security, fraud prevention, and service improvement
• Legal obligation: for compliance with applicable laws and regulations

5. Data Recipients

Your personal data may be shared with the following third-party service providers, strictly for the purposes described:

6. International Data Transfers

Some of our service providers (Stripe, Google) are based in the United States. These transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of data protection in accordance with the GDPR.

7. Data Retention

We retain your personal data for the following periods:

• Account data (email, password): for the duration of your account, deleted upon account deletion
• Projects and optimizations: for the duration of your account
• Payment data: Stripe customer and subscription references are retained for the duration of your account; detailed payment records are retained by Stripe in accordance with legal obligations
• Cookie data: see our Cookies Policy for specific durations

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — obtain a copy of your personal data held by us
• Right of rectification — correct inaccurate or incomplete data
• Right of erasure — request the deletion of your personal data
• Right to data portability — receive your data in a structured, commonly used format
• Right to restriction — request that we limit the processing of your data
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — withdraw your consent at any time for consent-based processing

To exercise any of these rights, please contact us at contact@cutoptima.com. We will respond within one month of receiving your request.

You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.

9. Cookies

The Site uses cookies and similar technologies. For full details on the cookies we use and how to manage your preferences, please see our Cookies Policy.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, loss, or destruction. These measures include: HTTPS encryption for all communications, bcrypt password hashing, CSRF protection, secure session management, and access controls limiting data access to authorized personnel only.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact

For any questions regarding this Privacy Policy or to exercise your rights, please contact us:

You may also contact the CNIL (Commission Nationale de l'Informatique et des Libertés), the French data protection authority, at www.cnil.fr.