Privacy Policy

The data controller is Validra, operated by Téo Brondel, sole trader (auto-entrepreneur), SIRET 935 405 985 000 18, registered address: 17 rue Primo Levi, 28300 Lèves, France. For any question about your personal data: teobrondel6@gmail.com.

Depending on how you interact with the site, we may collect:

• identification and contact data (name, email address) when you contact us or book a service;

• data shared as part of an engagement (read-only access to a code repository, staging environment URL, technical information needed for the analysis);

• when you use the free leak test: your email address, the address of the application tested, a summary of the result (the kind of items exposed, table and column names, never the content of rows) and, where available, how you reached the site (campaign parameters of the link you followed);

• billing information, where applicable;

• technical browsing data (IP address, browser type) if audience-measurement tools are used.

This data is used to: respond to your requests, perform and deliver the services ordered, manage the contractual relationship and billing, and improve the website.

When you use the free leak test, your email address is used to send you the result, followed by three advice emails over about ten days. Every email contains an unsubscribe link.

Processing of your data is based on the performance of a contract (delivering the service), our legitimate interest (responding to contact requests), or, where applicable, your consent (non-essential cookies).

Sending the leak test result is based on your request. The advice emails that follow are based on our legitimate interest in informing professionals about a topic related to their request; you can object at any time through the unsubscribe link.

Your data is never sold. It may be processed by technical providers strictly necessary to deliver the service, including:

• Vercel (website hosting and privacy-friendly audience measurement);

• Web3Forms (intake form) and Resend (sending emails and keeping the contact list);

• Stripe or any payment provider used for billing;

• artificial intelligence tools used to speed up parts of the analysis during an engagement, configured so that your data is not used to train their models (see the Terms of Service, section 7);

• Calendly (scheduling), where used.

Some of these providers may process data outside the European Union, under appropriate safeguards (standard contractual clauses). Source code and data shared during an engagement are never shared with anyone beyond these processors, and access credentials are never submitted to AI tools.

Access and technical data shared during an engagement (code, temporary access credentials) are deleted no later than 30 days after the engagement ends, unless the client requests otherwise. Contact and billing data are retained for as long as required to meet our legal and accounting obligations.

Data related to the free leak test (email address, application address, result summary) is kept for no more than 3 years after the last contact, or deleted on request. The content of rows read during the test is never kept.

Validra implements reasonable technical and organizational measures to protect your data against unauthorized access, loss, or disclosure.

Under the GDPR, you have the right to access, rectify, erase, restrict, object to, and port your data. You can exercise these rights by contacting us at teobrondel6@gmail.com. You also have the right to lodge a complaint with your national data protection authority (in France, the CNIL, at www.cnil.fr).

The site only uses cookies strictly necessary for it to function. Audience measurement relies on Vercel Web Analytics, which does not use cookies and does not track visitors across sites. If cookie-based tools are added in the future, a consent banner will be implemented in accordance with applicable regulations.

This policy may be updated from time to time. The last update date appears at the top of this page.