Privacy Policy

Data controller

The Account service is operated by a legal entity currently being created.

Official legal identifiers will be published once assigned.

• Privacy contact: support@all-enterprise.com

Data categories

Account processes data required for authentication, profile management, and connected-service access.

• Account identity: email, first name, last name, date of birth, avatar.
• Security: session data, minimized technical events, and pseudonymized logs.
• Exportable datasets: available through self-service data export.

Account deletion notification

After successful account deletion, Account sends a confirmation email to the deleted address.

This processing is based on legitimate interest (GDPR article 6(1)(f)) for account security and unauthorized-action detection.

• Data included in this email: impacted email address, UTC deletion timestamp, support contact.
• No additional sensitive data (password, date of birth, identity proof data) is included.
• Delivery is best effort and does not block effective account deletion.

Email and security log retention

Local application logs are rotated (bounded file size and limited backup count).

SMTP provider-side traces are retained under a limited contractual window, then deleted or anonymized.

• SMTP provider target retention policy: maximum 30 days.
• Application logs use pseudonymized identifiers to reduce personal-data exposure.

Your rights

You can access your data, export it, and request account deletion from the Account interface.

• Export: Settings > My Data > Download My Data.
• Deletion: Settings > Delete My Account.
• Contact: support@all-enterprise.com
• Supervisory authority: https://www.cnil.fr/