Privacy Policy

Last updated: March 2026

1. Data controller

Kévin Aubrée — Sole proprietorship (Micro-entreprise)
SIRET: 944 497 544 00014
Email: kev.aubree@gmail.com

2. Data collected

When using WarpForge, we collect the following data:

  • Identification data: name, email address
  • Connection data: IP address, user agent, session timestamps
  • Store credentials: Shopify and PrestaShop API keys (encrypted AES-256-GCM)
  • Migration data: products, categories, customers from your stores (transient data)
  • Billing data: payment information managed by Stripe (we do not store your card numbers)

3. Purposes of processing

  • Provision of the e-commerce migration service (legal basis: contract performance)
  • Billing and payment management via Stripe (legal basis: contract performance)
  • Service improvement and technical support (legal basis: legitimate interest)
  • Strictly necessary functional cookies (legal basis: legitimate interest)

4. Retention periods

  • Account data: retained while the account is active, then 3 years after deletion
  • Migration data: deleted 30 days after the migration is completed
  • Store credentials: deleted upon store disconnection or account deletion
  • Billing data: retained for 10 years (statutory accounting obligation)
  • Connection logs: retained for 12 months

5. Your rights

Under GDPR, you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right to rectification: correct inaccurate data
  • Right to erasure: delete your account and all your data (available in Settings > Account or via the API DELETE /api/v1/account)
  • Right to data portability: receive your data in a structured format
  • Right to object: object to certain processing activities
  • Right to lodge a complaint: file a complaint with the CNIL (www.cnil.fr)

To exercise your rights, contact us at: kev.aubree@gmail.com

6. Sub-processors

  • Stripe Inc. (payments) — USA, EU standard contractual clauses (SCC)
  • Vercel Inc. (hosting) — USA, EU standard contractual clauses (SCC)

7. Transfers outside the European Union

Payments are processed by Stripe Inc. (United States) and hosting is provided by Vercel Inc. (United States). These transfers are governed by standard contractual clauses (SCC) approved by the European Commission, ensuring an adequate level of protection for your data.

8. Cookies

WarpForge uses only strictly necessary functional cookies required for the service to operate (authentication session). No tracking, advertising or analytics cookies are used.

9. Data security

We implement appropriate technical and organizational measures to protect your data: AES-256-GCM encryption of credentials, HTTPS, CSRF protection, rate limiting, audit logs.

10. Contact

For any questions regarding this privacy policy:

Email:
kev.aubree@gmail.com