Privacy policy
This policy explains how REVEAL.U processes personal data collected on the website and when a personalised guide is ordered.
1. Data controller
The data controller is Camille TULEAU, a sole trader operating under the trade name REVEAL.U, 23 rue Louis Daudin, 86170 Cissé, France. For any question about your data, contact reveal.u.france@gmail.com.
2. Data processed
REVEAL.U processes identity and contact data, questionnaire answers, submitted photographs, and the information needed to manage the order and payment (reference, status and amount). Card data is processed by Stripe and is not accessible to REVEAL.U.
The site also collects traffic statistics with no advertising purpose: temporary session identifier kept while browsing, pages viewed, visit duration, technical errors and browser information. IP addresses are not recorded for this purpose.
3. Purposes and legal bases
This data is used to answer a request, enter into and perform the contract, design and send the guide, process payment, provide customer support and handle withdrawal requests. The legal basis is the performance of pre-contractual steps or the contract. Accounting and tax obligations are based on REVEAL.U’s legal obligations; site security and aggregated statistics are based on its legitimate interest.
4. Use of artificial intelligence tools
REVEAL.U manually uses ChatGPT Plus, provided by OpenAI, to assist in creating the guide’s text and visual content. Only strictly necessary questionnaire information and photographs may be entered there. The ChatGPT setting “Improve the model for everyone” is disabled: new conversations are not used to train OpenAI’s models. REVEAL.U remains responsible for the service.
No decision with legal or similarly significant effects on the customer is made solely by automated means. Where an image in the guide is generated or altered by AI and depicts the customer, it is identified as such in the guide.
5. Recipients and transfers
Data is accessible to REVEAL.U and, where necessary, to its technical providers for hosting, maintenance, email and Stripe payment. When ChatGPT Plus is used, the necessary data is also shared with OpenAI Ireland Limited, which processes it under its own privacy policy as the controller of the ChatGPT service.
OpenAI states that European ChatGPT users’ data may be processed on servers outside the European Economic Area, including in the United States, and that it relies on GDPR transfer mechanisms, including standard contractual clauses. Other providers may also process data outside the EEA; you may request details using the contact address above.
6. Retention periods
Questionnaire answers and photographs from a paid order are deleted no later than thirty days after delivery of the guide. If an order is not paid, they are deleted no later than thirty days after submission. Data needed for accounting is retained for the applicable legal period, generally ten years. Conversations and files manually entered in ChatGPT Plus are deleted by REVEAL.U no later than thirty days after delivery, subject to OpenAI’s own retention periods and legal obligations.
7. Your rights
Under the conditions laid down by the GDPR, you have rights of access, rectification, erasure, restriction, objection and data portability. You can exercise them by writing to reveal.u.france@gmail.com. You may also lodge a complaint with the CNIL.
8. Security and updates
REVEAL.U implements appropriate technical and organisational measures to protect data. This policy may change to reflect changes to processing or to the legal framework; its update date will then be amended.