Privacy Policy

[COMPANY NAME], [LEGAL FORM], with its registered office at [FULL ADDRESS], is the data controller for the processing of your personal data.

Contact: [DPO EMAIL]

In connection with your use of the Sladder platform and the sladder.io website, we collect the following categories of data:

• Identity data: first name, last name, email address, company name;
• Connection data: account credentials, login logs, IP address;
• Usage data: interactions with the platform, features used, imported experiment data;
• Billing data: billing details, payment information (processed by our payment provider, not stored by Sladder);
• Browsing data: cookies, pages visited, session duration (via [ANALYTICS TOOL, e.g. GA4]).

• Account data: retained for the duration of the subscription, then [3 years] from cancellation for dispute management;
• Billing data: [10 years] in accordance with statutory accounting obligations;
• Browsing data / cookies: maximum [13 months];
• Connection logs: [12 months].

Your data may be shared with the following categories of recipients, strictly limited to their needs:

• Hosting: [HOSTING PROVIDER, e.g. Vercel] — platform hosting;
• Database: Supabase — user data storage;
• Payment: [Stripe] — payment processing;
• Analytics: [Google Analytics 4 / other] — audience measurement;
• Email: [TOOL NAME, e.g. Resend, Postmark] — transactional emails;
• Support: [TOOL NAME, e.g. Intercom] — customer support.

All our sub-processors have been selected for their GDPR compliance. Where data is transferred outside the European Union, we ensure that appropriate safeguards are in place (standard contractual clauses or equivalent).

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: obtain a copy of the data we hold about you;
• Right to rectification: correct inaccurate or incomplete data;
• Right to erasure ("right to be forgotten"): request deletion of your data;
• Right to data portability: receive your data in a structured, machine-readable format;
• Right to object: object to certain processing based on legitimate interest;
• Right to restriction: request the temporary suspension of a processing activity;
• Right to withdraw consent at any time, without affecting prior processing.

To exercise your rights, contact us at: [DPO EMAIL]. We will respond within one month.

You also have the right to lodge a complaint with your national supervisory authority. In France: CNIL — www.cnil.fr.

Our website uses cookies and similar technologies. You can manage your preferences via the consent banner displayed on your first visit.

Strictly necessary cookies (no consent required):

• Session and authentication;
• Language and theme preferences.

Analytical cookies (consent required):

• [Google Analytics 4] — anonymised audience measurement.

You can opt out of analytical cookies at any time via our cookie manager or your browser settings.

We implement appropriate technical and organisational measures to protect your data: encryption in transit (HTTPS/TLS), access control, logging, and regular backups.

In the event of a data breach likely to result in a risk to your rights and freedoms, we undertake to notify the relevant supervisory authority within 72 hours in accordance with Article 33 of the GDPR.

We reserve the right to modify this policy at any time. In the event of a material change, you will be informed by email or via a notification on the platform. The last updated date is shown at the top of this page.

For any questions regarding the protection of your personal data:
[COMPANY NAME]
[FULL ADDRESS]
Email: [DPO EMAIL]