Privacy policy

Controller and contact

Controller: LuSoft, 21 rue Anatole France, 92000 Nanterre, FRANCE. Privacy contact: contact@lusoft.dev.

Data, purposes and legal bases

We process account identifiers and contact details to provide access; public submissions, comments and moderation data to operate the directory; payment and billing data to manage purchases; newsletter data to send communications where you have opted in; and limited security/anti-abuse data to protect the service. We do not sell personal data or use it for automated decisions producing legal or similarly significant effects.

Depending on the purpose, the legal basis is performance of a contract, compliance with a legal obligation, our legitimate interests (security, fraud prevention and service improvement), or your consent. Where processing is based on consent, you can withdraw it at any time.

Recipients, hosting and international transfers

Neon (database and authentication), Stripe (payments), Brevo (newsletter), Cloudflare R2 (media storage) and Cloudflare Turnstile (anti-abuse) act as service providers when enabled. We use their contractual data-processing terms; we maintain their current subprocessor lists and complete a transfer assessment where personal data may leave the EEA. Configure the actual Neon region and R2 jurisdiction before publication. Stripe and Cloudflare may process data globally; their DPA/transfer terms include applicable transfer mechanisms, such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses where available. Brevo’s DPA must be accepted and its hosting/processing location documented in our register.

We disclose data only to authorised personnel, processors and authorities where legally required. We do not publish personal data unless you submit it for publication.

Retention

Account and contribution data are kept for the life of the account and then deleted or anonymised, unless a legal claim or retention duty applies. Newsletter data is kept until withdrawal of consent. Aggregated audience and sponsored-placement statistics are purged after 25 months. Accounting records are retained for the applicable statutory period.

Your rights

You may request access, correction, erasure, restriction, objection, portability and withdrawal of consent at contact@lusoft.dev. We may request information reasonably necessary to verify identity. You may complain to the competent supervisory authority (in France, the CNIL).

Security and changes

We use access controls, encryption in transit and organisational safeguards appropriate to the risks. No internet service can guarantee absolute security. We will publish material changes on this page.