Your data, our responsibility.

Perfecture.fr is responsible for processing the personal data collected through the site and the service. For any request regarding your data, use the contact page.

We only collect the data necessary for the service to function:

• Account data: email address, and phone number if you enable SMS alerts.
• Monitoring data: the process and prefecture you want to monitor.
• Notification data: the Telegram connection identifier if you link a Telegram account, and browser push subscription details if you enable push notifications.
• Payment data: processed by Paddle (Merchant of Record); we never receive or store your card number.
• Purchase data: Paddle customer and transaction references, the plan purchased, amount, currency, and payment or refund status.
• Browsing data: audience measurement via PostHog, only if you accept cookies.
• Messages: the content you send us via the contact form.

• To send you the availability alerts you have set up (performance of the contract).
• To manage your account, purchases and billing (performance of the contract, legal obligations).
• To respond to your messages (legitimate interest).
• To measure audience and improve the service (consent, via the cookie banner).

We never sell your data and never use it for third-party advertising purposes.

Your data is processed by subprocessors and providers strictly necessary for the service:

• Supabase: database hosting and authentication (European Union).
• Paddle (Paddle.com Market Limited, United Kingdom): Merchant of Record, payment processing, invoicing, VAT collection, refunds and fraud prevention. Paddle acts as controller for its own purposes, described in its own privacy policy.
• Resend (United States): sending transactional emails and alerts.
• OVHcloud (France): delivery of alert and verification SMS messages, if you enable SMS alerts.
• Telegram: delivery of alerts to the Telegram channel you have connected, subject to Telegram's own terms and privacy policy.
• PostHog: audience measurement (European Union hosting), subject to your consent.

Your account and monitoring data are kept for as long as your account is active. If you delete your account, it is erased, except for data we are legally required to retain. Audience-measurement data is retained for limited periods in line with CNIL recommendations.

Billing records are kept for ten (10) years in accordance with accounting and tax obligations. Paddle, as Merchant of Record, retains the transaction data required for its own legal obligations.

A consent banner lets you accept or decline audience-measurement cookies on your first visit. Cookies strictly necessary for the site to function (authentication, security) do not require consent.

Under the GDPR, you have the right to access, rectify, erase, port, restrict, and object to the processing of your data. You can delete your account directly from your account area, or exercise all of your rights via the contact page. You may also lodge a complaint with the CNIL (cnil.fr), the French data protection authority.

Exchanges with the site are encrypted (HTTPS), database access is restricted, and payments are entirely delegated to Paddle, which is PCI-DSS compliant. In the event of a data breach likely to affect you, you will be informed in accordance with applicable regulations.

Most of our providers host your data within the European Union. Some are located outside the EU, in particular Resend (United States), Paddle (United Kingdom) and Telegram. These transfers are governed by the safeguards provided for by the GDPR, such as the European Commission's standard contractual clauses or an adequacy decision. Paddle and Telegram describe the transfers they carry out for their own purposes in their respective policies.

This policy may evolve along with the service. The applicable version is the one published on this page; any material change will be brought to your attention.