Privacy policy

Who is responsible for your data?

The publisher of the site, named in the legal notice, is the data controller. For any question about your data: visionsynthetiques@gmail.com.

The data we use

We only collect what Postair needs to work:

• Your account: e-mail address, name, password (stored only in an encrypted, irreversible form) or, if you choose “Continue with Google”, your Google identifier, name and e-mail address.
• Your creations: the text and instructions you enter, the images you upload and the posters generated.
• Your purchases: payments are handled by Stripe. Postair never sees your card number; we only keep payment references and your credit history.
• Technical data: IP address and sign-in information, used for security, abuse prevention and keeping you signed in.
• Anonymous audience measurement (Cloudflare Web Analytics), with no cookie and no individual tracking.

Why we use it

• To provide the service you ask for: create your account, generate and edit your posters, manage your credits and payments (performance of the contract).
• To meet our legal obligations, in particular accounting rules for payments.
• To protect the site and its users: security, fraud and abuse prevention, anonymous visit statistics (legitimate interest).

Providers involved

We do not sell your data and do not use it for advertising. It is only shared with the providers the service needs:

• Cloudflare: website hosting, database and image storage.
• OpenAI: text and image generation from your instructions.
• Ideogram: image generation for Humanize.
• Stripe: payments and subscriptions.
• Resend: e-mail delivery (address confirmation, password reset, welcome and a single reminder if you have not created anything yet).
• Google: sign-in with your Google account, only if you choose it.

Transfers outside the European Union

Some of these providers are based in the United States. These transfers rely on the safeguards provided by the GDPR, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep it

• Your account and posters: for as long as your account exists. You can delete a poster at any time, or your whole account from the Account page: your images, projects, e-mail and name are then erased.
• Payment and credit history: kept with a technical identifier, without your e-mail or name, for as long as accounting obligations require (up to 10 years).
• Technical security data: kept for a limited time, as long as needed to protect the service.

Cookies

Postair only uses cookies that are essential for it to work, such as the one that keeps you signed in. No advertising cookies or third-party trackers, so no consent is requested.

Your rights

You can access, correct, delete or export your data, object to its processing or ask for it to be restricted at any time. Write to visionsynthetiques@gmail.com: we reply within one month. If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).