Privacy Policy

Couvige Studio

Last updated: 8 September 2026

This Privacy Policy explains what personal data Couvige Studio collects, why we use it, and what rights you have.

1. Who looks after your data?

The data controller is:

Couvige Studio
Operated by: Boris Brésil
Contact: boris@couvigestudio.com
Privacy requests: privacy@couvigestudio.com

2. What do we collect about you?

Account data

  • Your email address
  • Your display name
  • Your language preference
  • Technical account settings
  • The date you last used the service

We need this data to create and manage your account. If you do not provide it, we cannot give you an account.

Profile data

  • Your display name
  • Any other profile details you choose to add

Invitation data

  • The email address of a person you invite, if you use the invitation form
  • The name you choose to sign your invitation with
  • Whether an invitation was opened and whether it led to a new account

Technical and security data

  • IP address
  • Browser type
  • Device information
  • Date and time of access
  • Authentication, error, and security logs
  • Basic usage events needed to run and protect the service

3. Why do we use your data?

PurposeData usedLegal basis
Create and manage your accountEmail, account ID, profile dataContract
Allow sign-in and sign-outEmail, authentication dataContract
Display your profileProfile dataContract
Protect the service from abuseLogs, IP address, security eventsLegitimate interest
Send necessary account emailsEmail addressContract
Send newsletters or marketing emailsEmail addressConsent
Understand usage and spot usability problemsUsage and interaction events, session replays (pseudonymous)Consent
Send an invitation you asked us to sendThe recipient's email address, the name you sign with, your optional noteLegitimate interest
Know whether an account is still in useDate you last used the serviceLegitimate interest

We rely on legitimate interest to keep the service secure, prevent abuse, and improve it. You can object to this (see Section 7).

4. Do we use cookies or analytics?

We use cookies and local storage that are necessary for the service to work, such as keeping you signed in and saving your projects in your browser.

With your consent, we use PostHog, a product-analytics tool hosted in the European Union, to understand how the studio is used and spot usability problems. It sets cookies and local storage and includes session replay — a recording of your interactions with the interface. Text you type, such as your email or password, is masked and never recorded.

These analytics run only after you accept the consent banner. You can decline (nothing is collected), and you can change or withdraw your choice at any time using the “Manage cookies” link in the page footer. Your choice is kept for six months, after which the banner asks again. Analytics data is hosted in the EU and is never used for advertising or shared with third parties.

5. Who else can see your data?

We use trusted service providers to run the platform. They process data only on our instructions:

  • Supabase, Inc. for authentication and database services. The database is hosted in Paris, France.
  • Vercel Inc. for website hosting. The website may be served through Vercel's global edge network. Server-side functions may run in Paris, France.
  • Brevo (Sendinblue SAS) for emails, including account emails and newsletters if you have agreed to receive them. Brevo is a French company and processes email data on servers located within the European Union.
  • PostHog for product analytics and session replay, only if you consent. We use PostHog's EU Cloud, so analytics data is stored and processed within the European Union.

We may also share data when the law requires it.

Data location: Your data is stored in Europe. Supabase, Vercel, Brevo and PostHog keep it on servers in the European Union, including France. Some of these companies are based outside Europe, and their technical teams sometimes need to look at the data to fix a problem. When that happens, European rules cover that access and protect your data.

6. How long do we keep your data?

DataRetention
Account dataAs long as your account exists
Profile dataAs long as your account exists
Date of last useAs long as your account exists
Local project dataUntil you delete it, clear browser data, or remove it from your device
Technical and security logs1 day, the period applied by our hosts Vercel and Supabase
Account sign-in records12 months (sign-ins, sign-ups, password resets), then deleted automatically
Transactional email logs3 months, the period applied by Brevo
Email address change requests7 days after the request is confirmed or expires, then deleted automatically
Newsletter consentUntil you unsubscribe or withdraw consent
Invitation records (who invited, when, whether accepted)As long as the inviting account exists
Email address of an invited personDeleted 7 days after the invitation is accepted or expires (invitations expire after 15 days). Only an irreversible fingerprint is kept, to avoid inviting the same person twice

You can delete your account at any time from your account settings. When you request deletion, we keep your data for up to 30 days so you can cancel if it was a mistake, then we permanently delete or anonymize it — unless the law requires us to keep some of it. You can also request deletion at privacy@couvigestudio.com.

7. What can you ask of us?

Under the GDPR, you can ask us to:

  • Access your personal data
  • Correct data that is wrong
  • Delete your data
  • Restrict how we use your data
  • Object to processing based on legitimate interest
  • Receive a copy of your data in a portable format
  • Withdraw consent at any time, where we rely on your consent
  • Give directives on what happens to your data after your death

Withdrawing consent does not affect what we did before you withdrew it.

You can also tell us in advance what should happen to your data after your death, and name someone to take care of it.

To use your rights, contact us at privacy@couvigestudio.com.

If you think we have not respected your rights, you can complain to the French data protection authority, the CNIL (www.cnil.fr).

8. What about younger users?

Couvige Studio is intended for users aged 15 and over. Users under 15 may use it only with permission from a parent or legal guardian.

9. Feedback and testimonials

When you send feedback, a problem report or a feature request from the Support Couvige page, we collect your message, your email address and — for problem reports — basic technical details (browser, screen size, app version) and any screenshot or project file you choose to attach. We use this only to improve the service and to reply to you.

Your feedback stays private unless you explicitly tick the box allowing public reuse. Only then may we quote it, with the display name you provide, as a public testimonial on our website or social media. You can withdraw this consent at any time by contacting us.

10. Invitations

If you invite someone

You can share a personal invitation link, or ask us to email an invitation on your behalf. We record who sent each invitation, the name you chose to sign it with, when it was created, whether it was opened, and whether it led to a new account. This lets us tell you nothing more than whether your invitations were taken up, and lets us understand how people find Couvige Studio.

If someone invited you

If you received an invitation email from us, a Couvige Studio user asked us to send you a single message and gave us your email address for that purpose alone. We rely on our legitimate interest in letting people recommend the service to someone they know.

  • We send one message. We do not send reminders or follow-ups.
  • Your address is not added to any mailing list and is never used for marketing.
  • Your address is deleted once the invitation is accepted or expires. Only an irreversible fingerprint of it is kept, so the same person is not invited twice.
  • The person who invited you is named in the message.

You do not need an account to exercise your rights. Write to privacy@couvigestudio.com and we will delete your address immediately.