— Aperçu de CONTENU (structure & densité). Le design final = blocks shadcnblocks. Les [TO COMPLETE] = faits juridiques que seul Dominique fournit. — ← toutes les pages
This policy explains what personal data Reprtoir collects, why, who we share it with, and the rights you have over it — across both our website and our application.
Last updated: [TO COMPLETE — date] · Applies to reprtoir.com and the Reprtoir app.
The Reprtoir service is operated by Reprtoir SAS, a company incorporated in France, which invoices customers and runs the service. Reprtoir SAS is the data controller for the personal data described here.
We only collect what we need to run the website, provide the app, and support you.
Your audio and catalog remain yours. Your audio is never used to train AI models, and everything stays exportable at any time.
We work with a small set of trusted providers to run Reprtoir. Each is bound by a data processing agreement compliant with Article 28 GDPR, and only processes data for the purpose below. We do not sell your personal data.
| Provider | Purpose | Scope | Data location |
|---|---|---|---|
| Amazon Web Services | Hosting & data processing | App | 🇪🇺 EU — Ireland (prod), Paris (backups) |
| PostHog | Product analytics | Both | 🇪🇺 EU |
| Cyanite (elceedee UG) | Audio analysis / tagging (Audio AI feature) | App | 🇪🇺 EU — Germany |
| Front | Customer support & communication | Both | 🇪🇺 EU — Ireland |
| Cookiebot | Cookie consent management | Website | 🇪🇺 EU — Denmark |
| Revolut Business | Payment — bank transfers | App | 🇪🇺 EU — Lithuania (Revolut Bank UAB) |
| Attio | CRM (customer & prospect data) | Both | 🇬🇧 UK — adequacy decision |
| Stripe | Payment processing (PCI Level 1) | App | EU (Stripe Payments Europe, Ireland) + US — SCC/DPF |
| Cloudflare | Website hosting & content delivery | Website | Global edge CDN — SCC |
| Cloudinary | Media & image delivery | App | US — SCC/DPF |
| Postmark | Transactional email | App | US — SCC/DPF |
| Bugsnag | Error & stability monitoring | Both | US — SCC/DPF |
| Kit (ConvertKit) | Email marketing / newsletters | Both | US — SCC/DPF |
We keep this list current. Where a provider processes data outside the EU, we rely on appropriate safeguards (see below).
Your core data — your catalog, audio and business records — is hosted in the European Union (AWS Ireland/Paris). Our analytics (PostHog), audio tagging (Cyanite, Germany), support (Front, Ireland) and bank transfers (Revolut, Lithuania) also run in the EU. Our CRM (Attio) is UK-based, covered by the EU's adequacy decision.
A few providers process limited data in the United States — card payments (Stripe), transactional email (Postmark), media delivery (Cloudinary), error monitoring (Bugsnag) and email marketing (Kit). For these, we rely on appropriate safeguards: EU Standard Contractual Clauses (SCC) and, where applicable, the EU–US Data Privacy Framework (DPF). [safeguards to confirm per vendor]
We keep personal data only as long as necessary, then delete or anonymise it. We separate what lives inside the app from our own business records.
Your account, your catalog (audio, metadata, artwork, contracts) and the backups that contain them are deleted 45 days after the final deletion notice.
Invoicing and accounting data — including your company name, address and email — is kept for 10 years in our billing system and CRM. This meets our legal accounting obligations and lets us honour your choices (for example, not re-contacting an address that has unsubscribed).
You can ask us to delete your account and data at any time — see your rights.
Encryption in transit and at rest, EU-hosted infrastructure, continuous monitoring, least-privilege access and role-based permissions. Full detail on our Security page.
Under the GDPR, you can:
To exercise any of these, reach us through our contact form. You also have the right to lodge a complaint with your local supervisory authority — in France, the CNIL (cnil.fr).
We may update this policy as our service evolves; we'll post the new version here and update the date at the top. For any privacy question, reach us through our contact form or by post at our registered office above.