Privacy Policy
Last updated: 30 June 2026
1. Data controller
Eric Mollenthiel (Mollenthiel Studio), 103 Avenue Lacassagne, 69003 Lyon, France. Contact: support@shipanvil.com. We do not appoint a Data Protection Officer; the contact above handles all privacy requests.
2. What we collect and why
- Account data (email, password hash, organization name): to create and secure your account.
- Billing data (subscription status, invoices): handled by our payment provider; we never see or store card numbers.
- Usage data (server logs, feature usage and, if the AI features are enabled, AI token counts): to operate, secure and improve the service.
- Content you submit (anything you type into the app, including AI prompts): processed only to provide the feature you are using.
3. Legal bases
We process your data to perform our contract with you (providing the service), to comply with legal obligations (invoicing, accounting), and on our legitimate interest in securing and improving the service. Any marketing email is sent only with your consent and you can withdraw it at any time.
4. Processors and transfers
We rely on a small set of reputable sub-processors:
- Hosting: our infrastructure provider, within the EU.
- Payments: our payment provider (Stripe or Lemon Squeezy), who acts as merchant of record where applicable.
- Email delivery: our transactional email provider.
- AI processing (only if you use the AI features): Anthropic, which processes the text you submit to generate a response. It is not used to train their models.
Where a provider operates outside the EEA, transfers are covered by the appropriate safeguards (Standard Contractual Clauses or an adequacy decision). The current, detailed sub-processor list is available on request at support@shipanvil.com.
5. Retention
Account data is kept for the life of the account and deleted within 30 days of account deletion. Invoices and accounting records are kept for the period required by law (in France, 10 years). Server logs are rotated within a few weeks.
6. Your rights
Depending on your jurisdiction you can access, rectify, export, restrict or delete your personal data, and object to certain processing. Write to support@shipanvil.com; we answer within 30 days. You may also lodge a complaint with your supervisory authority (in France, the CNIL).
7. Cookies
We use only strictly necessary cookies (session and security). We run no advertising or third-party analytics cookies, so no consent banner is required.
8. Security
We protect your data with encryption in transit (HTTPS/TLS), hashed passwords, optional two-factor authentication, strict access controls and regular encrypted backups.