Privacy policy

Last updated : August 10, 2026

Controller

COMM’ON, Village de Solenzara, RN 198, 20145 Sari-Solenzara, France, is the controller. Contact: contact@agencecommon.com.

Data and purposes

• account identity and email: authentication and customer portal;
• billing identity, address, VAT information and Stripe identifiers: orders, invoices and accounting;
• license keys, websites, plugin versions and last contact: activation limits, updates and fraud prevention;
• support messages and technical context: assistance and incident resolution;
• security logs and request fingerprints: abuse and attack prevention;
• aggregate daily browsing and conversion counters: page, language, plan, campaign parameters and referring domain, without visitor identifier, IP address, email, cookie or user-agent.

Legal bases

Contract performance supports accounts, orders, licenses and support. Legal obligations support invoicing and accounting. Legitimate interest supports service security, fraud prevention and aggregate measurement used to improve the commercial journey. Consent is used whenever legally required.

Recipients and processors

Authorized COMM’ON personnel and necessary providers may receive limited data: Stripe for payment and billing, Supabase for authentication and application data, Vercel for hosting, and Resend for transactional email.

International transfers

Some providers operate outside the European Economic Area. Transfers rely on an adequacy decision, Standard Contractual Clauses or another lawful safeguard offered by the provider.

Retention

• account, license and support data: contract duration, then up to five years for evidence and disputes;
• invoices and accounting records: ten years;
• prospect data: three years after the last inbound contact;
• technical and security logs: up to twelve months unless an incident requires longer preservation;
• aggregate browsing and conversion counters: up to thirteen months.

Your rights

You may request access, correction, deletion, restriction, portability where applicable, or object to legitimate-interest processing. Contact contact@agencecommon.com. You may also complain to the French CNIL.

Cookies and measurement

StaticGuard uses no advertising cookie. Its internal browsing and conversion measurement uses no cookie, local storage, visitor identifier or customer-account matching. Strictly necessary account cookies may be stored after login. Any future non-essential tracker will be disclosed and submitted to consent where required.