Privacy Policy

You send us a request, sometimes the code of an application. This page says exactly what we do with it, who can see it and how long we keep it.

Who is responsible for this data

The data controller is the site publisher, identified on the legal notice page. For any question or request about your data, write to contact@sosvibecode.com.

What we collect

Only what you enter in the contact form:

• your name and email address, required so we can reply;
• the description of what you need;
• if you provide them: your application's address, the tool it was built with and the type of need;
• if you upload them: your project files, which may contain source code;
• any other information you enter in the form.

If you click "book a slot", a scheduling window provided by Cal.com opens on the site. Cal.com collects your name, your email address and the reason you give. That script only loads at that moment: as long as you do not click that button, no Cal.com script or cookie is set.

The site assistant passes your questions to Mistral AI, a French company whose servers are located in the European Union, for as long as it takes to produce an answer. We keep those exchanges for ninety days, to spot abusive use and to fill gaps in the site when a question goes unanswered. The assistant is not meant to receive personal data: messages containing any are refused before anything is sent.

Why, and on what basis

This data is used to answer your request, produce a quote and, if you accept it, carry out the work. The legal basis is your request itself: we process this information because it is necessary to reply to you and, where applicable, to perform the resulting contract.

We do not use it for unsolicited prospecting, for profiling, or to feed any model.

How long we keep it

• Uploaded project files: kept for as long as we are studying and scoping your request. If you do not follow up after we send the quote, they are deleted six months later. The link our team uses to consult them expires twenty-four hours after the request is received.
• Requests with no follow-up: kept for three years from our last exchange, then deleted.
• Requests that became engagements: kept for the duration of the business relationship, then for the legal retention period applying to accounting and contractual records.
• Assistant exchanges: kept for ninety days, then deleted automatically.
• Audience measurement: see ourcookie policy.

Who can see it

Your data stays with us. The site, the database, the mail system and our request tracking tool all run on our own infrastructure, operated by our teams, on servers leased from OVH and located in France. None of this information is sold, rented, or passed to a third party for commercial purposes.

On request, we sign a non-disclosure agreement before any code is exchanged.

Your rights

You may ask to access your data, correct it, delete it, restrict its processing, or object to it. You may also ask to receive it in a reusable format. Write tocontact@sosvibecode.com.

If our answer does not satisfy you, you may lodge a complaint with the French data protection authority (CNIL),www.cnil.fr, 3 place de Fontenoy, 75007 Paris, France.

Security

Exchanges with this site are encrypted. Access to requests and to the files that come with them is restricted to members of the SOSVibecode team.