Privacy policy

Kratore processes your data only to run the platform, keep it secure and meet its legal obligations. We do not sell your data and we do not run targeted advertising. You can view and download your data at any time from "Mes données" (My data).

Yendoubouam NABIAGUE, acting on behalf of Kratore, a French SAS currently being registered. The registration number and registered office address will be added here once registration is complete. Contact for any question about your data: support@kratore.com.

Data: name, email address, password (stored in encrypted form by our authentication provider; we never see it), photo and profile details you choose to add. Why: to create and manage your account and let you use Kratore. Legal basis: performance of the contract (our terms of use). Retention: as long as your account exists. After a deletion request, your data is erased on the schedule shown on the deletion screen, except data the law requires us to keep (see 2.3 and 2.4).

Data: messages, comments, reactions, files, courses and other content you publish in a community. Why: to show it to the authorised people in the community. Files attached to private messages are only accessible to the participants in the conversation. Legal basis: performance of the contract. Retention: as long as the content, the community or your account exists.

Data: offers purchased, amounts, dates, subscription status, refunds, invoices. Payments are processed by our payment provider: Kratore never receives or stores your card number. Why: to give you access to what you bought, handle refunds and keep our accounts. Legal basis: performance of the contract, and our legal accounting and tax obligations. Retention: 10 years for accounting records (article L123-22 of the French Commercial Code).

Data: the text you accepted (terms, purchase checkbox, withdrawal request), the date and time, and the IP address and browser type used at that moment. Why: to be able to prove the conclusion and performance of the contract in case of a complaint or dispute. Legal basis: our legitimate interest in being able to establish our rights. Retention: 5 years after our contractual relationship ends, 10 years for an electronic contract of at least €120 including VAT (articles L213-1 and D213-2 of the French Consumer Code). This data is only consulted in case of a complaint, a dispute or a request from an authority. It is included in "Mes données" (My data).

Data: your account identifier and IP address, used to limit repeated attempts (login, password check, payment). Retention: 15 minutes. Data: technical error reports. They contain neither your IP address, nor your passwords, nor the content of your requests. When a server error occurs, they may contain your account identifier (a code, not your name). Retention: the time needed to fix the error, at most 90 days. Legal basis: our legitimate interest in protecting the platform and its users.

Data: your name, your email address if you provide it, your message. Why: to reply to you. A fingerprint of your email address is kept for 24 hours and your IP address for 15 minutes to prevent abuse. Legal basis: our legitimate interest in answering requests and preventing abuse. Retention: exchanges with support are kept for at most 1 year.

We send you the emails the service needs (confirmation, security, purchases, information about your account or your community). A technical log of sent emails is kept for 90 days. If you enable browser notifications, we keep your browser's technical subscription until you turn them off. Legal basis: performance of the contract.

If you ask Alice a question, your question and the information needed to answer it are sent to our artificial intelligence provider (OpenAI) to generate the answer. This provider does not use this data to train its models. Alice's answers are produced by an artificial intelligence. Legal basis: performance of the contract.

Kratore only uses trackers that are strictly necessary for the service to work. Details are in our cookie policy.

- Members of your communities see what you publish there and your public profile. - The creator of a community sees the information needed to manage it (for example your name and your memberships). If they use this information outside Kratore, they do so under their own responsibility. - Our technical providers, who act only on our instructions: database hosting and authentication (Supabase, European Union); application server (Render, European Union); website (Vercel); videos (Bunny, European Union); email delivery (Resend); payments (Stripe); technical error monitoring (Sentry, European Union); Alice assistant (OpenAI); support mailbox (Zoho). - Authorities, only where the law requires it.

Some providers are established in the United States or may access data from the United States (in particular Vercel, Resend, Stripe and OpenAI). These transfers are covered by the EU–US Data Privacy Framework where the provider participates in it, and otherwise by the European Commission's standard contractual clauses.

At any time, you can: - access and download your data from "Mes données" (My data); - have it corrected; - have it erased, by deleting your account or by writing to us; - restrict its processing or object to processing based on our legitimate interest; - receive the data you provided to us in a reusable format; - set instructions for what happens to your data after your death. Write to us at support@kratore.com. We reply within one month. If you believe your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority.

If we change this policy, the new version is published here with its date. For significant changes, we will notify you by email or in the app.