The protection of your personal data is a priority for CertifDrone. In accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act, this policy details how we collect, use and protect your information.
1. Data Controller
The data controller is the CertifDrone platform. For any questions, you can contact us via our contact page or by email.
2. Collected Data
We only collect the data necessary for the proper functioning of your training:
• Identity and contact: Surname, first name, email address.
• Payment data: Exclusively managed by Stripe (CertifDrone does not have access to your credit card numbers).
• Educational monitoring: Progress history, MCQ scores, time spent on modules, success statistics by theme.
• Technical data: Connection logs, IP address, browser type (for security and service stability).
3. Purposes of Processing
Your data is processed for the following reasons:
• Execution of the contract: Account creation, access to training modules and subscription management.
• Learning optimization: Use of our intelligent revision algorithm (spaced repetition method) which analyzes your errors to propose the most relevant questions to you at the right time.
• Billing: Management of monthly debits via Stripe and issuance of invoices.
• Communication: Sending transactional emails (registration confirmation, renewal alerts).
4. Legal Basis for Processing
The processing of your data is based on:
• The contract: Necessary to provide you with access to paid or free services.
• Legitimate interest: To ensure the security of the Site and improve our educational tools.
• Legal obligation: For the conservation of accounting documents (invoices).
5. Data Recipients
Your data is strictly confidential. It is never resold to third parties. The only recipients are:
• The CertifDrone internal team (technical and educational support).
• Stripe: Our secure payment provider.
• Site host (Supabase/Netlify): For technical data storage.
6. Retention Period
• Active account: Data is kept as long as your account is active.
• Inactivity: In case of prolonged inactivity (without an active subscription), your progress data is deleted after 24 months so as not to clutter our servers, unless you request early deletion.
• Accounting documents: Kept for 10 years in accordance with legal obligations.
7. Your Rights
In accordance with GDPR, you have the following rights:
• Right of access and rectification: You can modify your information from your profile space.
• Right to erasure: You can request the deletion of your account and statistics.
• Right to portability: You can request a copy of your progress data.
• Right to object: You can object to the use of your statistics for algorithm improvement purposes.
To exercise these rights, contact us via our official support.
8. Security
CertifDrone implements technical (SSL/HTTPS encryption) and organizational security measures to protect your data against unauthorized access, loss or alteration.
9. Cookies
The Site uses technical cookies strictly necessary for navigation and remembering your training session. We do not use third-party advertising cookies.