Privacy Policy
Couvige Studio
Last updated: 8 September 2026
This Privacy Policy explains what personal data Couvige Studio collects, why we use it, and what rights you have.
1. Who looks after your data?
The data controller is:
Couvige Studio
Operated by: Boris Brésil
Contact: boris@couvigestudio.com
Privacy requests: privacy@couvigestudio.com
2. What do we collect about you?
Account data
- Your email address
- Your display name
- Your language preference
- Technical account settings
- The date you last used the service
We need this data to create and manage your account. If you do not provide it, we cannot give you an account.
Profile data
- Your display name
- Any other profile details you choose to add
Invitation data
- The email address of a person you invite, if you use the invitation form
- The name you choose to sign your invitation with
- Whether an invitation was opened and whether it led to a new account
Technical and security data
- IP address
- Browser type
- Device information
- Date and time of access
- Authentication, error, and security logs
- Basic usage events needed to run and protect the service
3. Why do we use your data?
| Purpose | Data used | Legal basis |
|---|---|---|
| Create and manage your account | Email, account ID, profile data | Contract |
| Allow sign-in and sign-out | Email, authentication data | Contract |
| Display your profile | Profile data | Contract |
| Protect the service from abuse | Logs, IP address, security events | Legitimate interest |
| Send necessary account emails | Email address | Contract |
| Send newsletters or marketing emails | Email address | Consent |
| Understand usage and spot usability problems | Usage and interaction events, session replays (pseudonymous) | Consent |
| Send an invitation you asked us to send | The recipient's email address, the name you sign with, your optional note | Legitimate interest |
| Know whether an account is still in use | Date you last used the service | Legitimate interest |
We rely on legitimate interest to keep the service secure, prevent abuse, and improve it. You can object to this (see Section 7).
4. Do we use cookies or analytics?
We use cookies and local storage that are necessary for the service to work, such as keeping you signed in and saving your projects in your browser.
With your consent, we use PostHog, a product-analytics tool hosted in the European Union, to understand how the studio is used and spot usability problems. It sets cookies and local storage and includes session replay — a recording of your interactions with the interface. Text you type, such as your email or password, is masked and never recorded.
These analytics run only after you accept the consent banner. You can decline (nothing is collected), and you can change or withdraw your choice at any time using the “Manage cookies” link in the page footer. Your choice is kept for six months, after which the banner asks again. Analytics data is hosted in the EU and is never used for advertising or shared with third parties.
5. Who else can see your data?
We use trusted service providers to run the platform. They process data only on our instructions:
- Supabase, Inc. for authentication and database services. The database is hosted in Paris, France.
- Vercel Inc. for website hosting. The website may be served through Vercel's global edge network. Server-side functions may run in Paris, France.
- Brevo (Sendinblue SAS) for emails, including account emails and newsletters if you have agreed to receive them. Brevo is a French company and processes email data on servers located within the European Union.
- PostHog for product analytics and session replay, only if you consent. We use PostHog's EU Cloud, so analytics data is stored and processed within the European Union.
We may also share data when the law requires it.
Data location: Your data is stored in Europe. Supabase, Vercel, Brevo and PostHog keep it on servers in the European Union, including France. Some of these companies are based outside Europe, and their technical teams sometimes need to look at the data to fix a problem. When that happens, European rules cover that access and protect your data.
6. How long do we keep your data?
| Data | Retention |
|---|---|
| Account data | As long as your account exists |
| Profile data | As long as your account exists |
| Date of last use | As long as your account exists |
| Local project data | Until you delete it, clear browser data, or remove it from your device |
| Technical and security logs | 1 day, the period applied by our hosts Vercel and Supabase |
| Account sign-in records | 12 months (sign-ins, sign-ups, password resets), then deleted automatically |
| Transactional email logs | 3 months, the period applied by Brevo |
| Email address change requests | 7 days after the request is confirmed or expires, then deleted automatically |
| Newsletter consent | Until you unsubscribe or withdraw consent |
| Invitation records (who invited, when, whether accepted) | As long as the inviting account exists |
| Email address of an invited person | Deleted 7 days after the invitation is accepted or expires (invitations expire after 15 days). Only an irreversible fingerprint is kept, to avoid inviting the same person twice |
You can delete your account at any time from your account settings. When you request deletion, we keep your data for up to 30 days so you can cancel if it was a mistake, then we permanently delete or anonymize it — unless the law requires us to keep some of it. You can also request deletion at privacy@couvigestudio.com.
7. What can you ask of us?
Under the GDPR, you can ask us to:
- Access your personal data
- Correct data that is wrong
- Delete your data
- Restrict how we use your data
- Object to processing based on legitimate interest
- Receive a copy of your data in a portable format
- Withdraw consent at any time, where we rely on your consent
- Give directives on what happens to your data after your death
Withdrawing consent does not affect what we did before you withdrew it.
You can also tell us in advance what should happen to your data after your death, and name someone to take care of it.
To use your rights, contact us at privacy@couvigestudio.com.
If you think we have not respected your rights, you can complain to the French data protection authority, the CNIL (www.cnil.fr).
8. What about younger users?
Couvige Studio is intended for users aged 15 and over. Users under 15 may use it only with permission from a parent or legal guardian.
9. Feedback and testimonials
When you send feedback, a problem report or a feature request from the Support Couvige page, we collect your message, your email address and — for problem reports — basic technical details (browser, screen size, app version) and any screenshot or project file you choose to attach. We use this only to improve the service and to reply to you.
Your feedback stays private unless you explicitly tick the box allowing public reuse. Only then may we quote it, with the display name you provide, as a public testimonial on our website or social media. You can withdraw this consent at any time by contacting us.
10. Invitations
If you invite someone
You can share a personal invitation link, or ask us to email an invitation on your behalf. We record who sent each invitation, the name you chose to sign it with, when it was created, whether it was opened, and whether it led to a new account. This lets us tell you nothing more than whether your invitations were taken up, and lets us understand how people find Couvige Studio.
If someone invited you
If you received an invitation email from us, a Couvige Studio user asked us to send you a single message and gave us your email address for that purpose alone. We rely on our legitimate interest in letting people recommend the service to someone they know.
- We send one message. We do not send reminders or follow-ups.
- Your address is not added to any mailing list and is never used for marketing.
- Your address is deleted once the invitation is accepted or expires. Only an irreversible fingerprint of it is kept, so the same person is not invited twice.
- The person who invited you is named in the message.
You do not need an account to exercise your rights. Write to privacy@couvigestudio.com and we will delete your address immediately.