Legal

Privacy Policy

Last updated: May 1, 2026

This Privacy Policy describes how Digital Lab ("we", "us", "our") collects, uses, and shares personal data when you use our website digital-lab.app and our services (the "Service"). We comply with the EU General Data Protection Regulation (GDPR) and applicable French data protection law.

1. Data controller

Digital Lab, 47 Rue Vivienne, 75002 Paris, France. SIREN: 102 795 531. Contact: [email protected].

2. Data we collect

  • Account data: name, email, password (hashed), company.
  • Billing data: billing address, VAT ID, transaction history. Card details are processed by our payment provider; we never store them.
  • Usage data: pages visited, features used, device and browser metadata, IP address.
  • Integration data: data you authorize us to read from connected stores (e.g. Shopify) or supplier APIs.
  • Support data: messages you send us by email or chat.

3. Legal bases and purposes

  • Performance of contract: to provide, maintain, and bill for the Service.
  • Legitimate interests: to secure the Service, prevent fraud, and improve features.
  • Consent: for non-essential cookies, analytics, and marketing communications.
  • Legal obligation: tax, accounting, and responses to lawful requests.

4. Sharing

We share data with vetted sub-processors strictly to operate the Service: cloud hosting, payment processing, transactional email, customer support, and analytics. We do not sell personal data.

5. International transfers

When data is transferred outside the EEA, we rely on Standard Contractual Clauses or equivalent safeguards.

6. Retention

We retain account data while your account is active and for up to 36 months after closure, except where a longer retention is required by law (e.g. accounting records: 10 years).

7. Your rights

You may access, rectify, erase, restrict, port, or object to processing of your personal data, and lodge a complaint with the CNIL (www.cnil.fr). Email [email protected] to exercise your rights.

8. Security

We use encryption in transit and at rest, role-based access, audit logs, and regular security reviews.

9. Changes

We may update this policy. Material changes will be announced by email or in-app notice.