Privacy (draft)

DRAFT This text has not yet been reviewed by a lawyer and the data protection impact assessment (AIPD) is not finished. It describes how the service works today and will change before the public launch.

Who we are

France for Me is a private service. It is not linked to the French state, préfectures, the CAF, the CPAM or the tax office. Contact: info@franceforme.info. The controller's full details (company) will be added here before launch.

What data, and where it comes from

Only from you: your email and name from sign-in (Google or an email link); your questionnaire answers (document type, dates, work, department, children yes/no); details for letters that you type yourself; chat messages; files you upload to the vault; document fields you ticked yourself after a scan.

We never log in to your government accounts and receive no data from public bodies.

What we never keep

Your social security number (NIR) is masked and never stored. NIR, IBAN and card numbers are removed from chat messages before they are saved and before the AI model sees them. We keep no medical data, only facts like "has a Carte Vitale: yes/no". The text of a 2D-Doc code is checked on the server and not kept.

How long we keep it

Chat: the last 40 messages; you delete the history with one button. Vault files: encrypted with their own key, deleted after 365 days or at once with the Delete button. Profile and letter details: while the account exists; delete them with the buttons on those pages.

Who processes data for us

Cloudflare: hosting, database, file storage and the AI model (Workers AI) for chat, search translation and reading a document when you ask. Google: only if you sign in with Google. Resend: sign-in and reminder emails, only if you turned reminders on. Where the AI models are run is still being checked as part of the AIPD.

Cookies and statistics

Only necessary cookies: the sign-in session and your chosen language. Visit statistics (Cloudflare Web Analytics) work without cookies and without any personal identifier. There are no advertising trackers.

Your rights

You can access, correct or delete your data and object to its use (GDPR). Most of this is available with buttons in the app. Complaints: CNIL, www.cnil.fr.