Privacy Policy
Last updated: March 20, 2026
1. Data Controller
The data controller for personal data is: COLLIE Simon, sole proprietor (auto-entrepreneur) Address: 16, place des Quinconces, 33000 Bordeaux, France SIRET: 98968159800029 Email: contact@breathprofile.com
2. Data Collected
We collect the following data: • Email address: provided during email capture or ordering. • Questionnaire responses: your answers to the breathing assessment (breathing habits, symptoms, goals). • Payment data: processed directly by Stripe. We never store your credit card numbers. • Technical data: IP address, browser type, for security and proper service operation.
3. Purpose of Processing
Your data is used to: • Generate your personalized breathing profile and results. • Create your personalized PDF documents (Practical Protocol, Theoretical Guide) using artificial intelligence. • Process your payment and deliver your order. • Send you transactional emails (order confirmation, delivery link). • Improve our services and assessment questionnaire.
4. Legal Basis
The processing of your data is based on: • Contract performance: processing your order, generating your personalized documents, delivery. • Consent: collection of your email for communications. • Legitimate interest: improving our services, website security.
5. Data Hosting and Storage
Your data is stored on Supabase servers (infrastructure hosted on AWS). Data is hosted within the European Union. Appropriate technical and organizational security measures are in place to protect your data against unauthorized access, loss, or alteration.
6. Subprocessors and Third Parties
Your data may be shared with the following subprocessors, strictly within the scope of the purposes described above: • Stripe (stripe.com) — Payment processing. Stripe is PCI-DSS certified and processes credit card data securely. • Supabase (supabase.com) — Database hosting containing your questionnaire responses and profile. • Resend (resend.com) — Sending transactional emails (confirmation, delivery). • Anthropic / Claude (anthropic.com) — Artificial intelligence service used for personalizing your PDF documents. Only data necessary for generation (questionnaire responses, profile) is transmitted. • Vercel (vercel.com) — Website hosting. No personal data is sold to third parties.
7. Data Retention
Your data is retained for the following periods: • Account data and questionnaire responses: 3 years from the last use of the service. • Order data and invoices: 10 years in accordance with legal accounting obligations. • Email addresses: until unsubscription or deletion request. Beyond these periods, your data is deleted or anonymized.
8. Your Rights (GDPR)
In accordance with the General Data Protection Regulation (GDPR), you have the following rights: • Right of access: obtain confirmation that your data is being processed and receive a copy. • Right to rectification: request the correction of inaccurate or incomplete data. • Right to erasure: request the deletion of your personal data. • Right to data portability: receive your data in a structured, machine-readable format. • Right to object: object to the processing of your data on legitimate grounds. • Right to restriction: request the restriction of processing of your data. To exercise your rights, contact us at: contact@breathprofile.com You also have the right to lodge a complaint with the CNIL (French National Data Protection Authority): www.cnil.fr
9. Cookies
The breathprofile.com website uses only essential cookies necessary for the operation of the service (session cookies, language preferences). No advertising or tracking cookies are used. These essential cookies do not require your consent in accordance with applicable regulations.
10. Contact
For any questions regarding this privacy policy or your personal data, contact us at: contact@breathprofile.com