Privacy Policy
Effective as of July 8, 2026
1. Data controller
Personal data collected in connection with the GeoGarage platform is processed by Magic Instinct Software (MIS), a French SARL with a share capital of €75,900, RCS Nantes 431 453 521, 10 rue Traversière, 44300 Nantes, France — contact@geogarage.com (see the Legal Notice).
For any question about your data or to exercise your rights: contact@geogarage.com.
2. Data we collect
We only collect the data needed to operate the service:
- Account data: email address, password (stored in irreversibly hashed form), unique customer identifier.
- Subscription and billing data: plan subscribed, subscription history, invoices. Bank card numbers never pass through our servers: they are entered and processed directly by our payment provider, Stripe.
- Technical data: logs of requests to the platform (IP address, customer identifier, timestamp, charts requested), needed for service security and the prevention of prohibited uses (redistribution, bulk downloading).
No data is collected for advertising purposes. We do not sell or rent your data to third parties.
3. Purposes and legal bases
| Processing | Purpose | Legal basis |
|---|---|---|
| Customer account and chart delivery | Performance of the subscribed service | Performance of the contract |
| Payment and invoicing | Collection, accounting | Performance of the contract / legal obligation |
| Retention of invoices | Accounting and tax obligations | Legal obligation |
| Technical logs | Security, abuse prevention | Legitimate interest (protection of the service and of the chart licences) |
| Service emails | Payment receipts, renewal reminders, account notifications | Performance of the contract / legal obligation |
We do not send marketing emails or newsletters: only the emails needed to manage your subscription.
4. Recipients and processors
Your data is accessible only to authorised MIS personnel and to our processors, within the limits of their tasks:
- Stripe (Stripe Payments Europe Ltd / Stripe Inc.) — payment processing. Transfers of data outside the European Union carried out by Stripe are governed by appropriate safeguards (European Commission standard contractual clauses).
- Scaleway SAS (Paris, France) — hosting of the platform within the European Union.
Your data may also be disclosed to the authorities where required by law.
5. Retention periods
- Account data: for the duration of the subscription, then for five (5) years from the end of the contractual relationship (statutory limitation period), in a restricted-access archive.
- Invoices and accounting records: ten (10) years (legal obligation).
- Technical logs: twelve (12) months maximum.
6. Your rights
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the rights of access, rectification, erasure, restriction, objection and portability over your personal data.
To exercise them, write to us at contact@geogarage.com (or by post to the registered office). We will reply within one month. In case of reasonable doubt about your identity, proof of identity may be requested.
Deletion of your account may be requested by email at the same address; it ends access to the service, subject to data whose retention is required by law (in particular invoices).
If you consider that your rights are not being respected, you may lodge a complaint with the French supervisory authority, the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
7. Cookies
The site only uses:
- technical cookies strictly necessary for the operation of the service (login session, form protection, cookies set by Stripe during payment) — exempt from consent;
- an audience measurement tool configured in accordance with the CNIL consent exemption (anonymised statistics, no cross-site tracking, no data matching) — also exempt from consent.
No advertising or third-party tracking cookies are used. This is why the site does not display a cookie consent banner.