Aller au contenu principal
Vendy Logo
Se connecterS'inscrireOffres

PRIVACY POLICY

Vendy Studio

Version 01 - Last updated: 19/12/2025

This Privacy Policy is intended to inform the users of the Vendy Studio platform ("the Platform") of the conditions under which their personal data is collected, used and protected, in accordance with Regulation (EU) 2016/679 ("GDPR").

1. IDENTITY OF THE DATA CONTROLLER

The data controller is: Vendy Studio

Provider of the platform:

  • VLA STUDIO - Mr François Vella
  • Registered office: 1A Rue Marcel Sembat, 62880 Vendin-le-Vieil, France
  • E-mail contact: contact@vendystudio.fr

The website is hosted by: Vercel Inc. Address: 340 S Lemon Ave #4133, Walnut, CA 91789, USA

2. PERSONAL DATA COLLECTED

In the course of using the Service, Vendy Studio may collect the following categories of data:

  • Identification data: e-mail address, account identifier;
  • Connection data: technical logs, IP address, browser type, dates and times of connection;
  • Browsing data (audience measurement): information relating to the use of the Platform (pages visited, events, audience measurement cookie identifiers), according to your choices;
  • Payment data: information relating to transactions (via Stripe, without access to full bank details);
  • Uploaded content: photographs of garments (which may contain personal data if the user does not comply with the rules);
  • Usage data: number of generations, credit consumption, functional preferences;
  • Support-related data: exchanges by e-mail.

The Service is not intended to process sensitive data within the meaning of the GDPR. However, in the event of a non-compliant upload by the user (e.g. a photograph containing an identifiable person, a home, a name label), personal data — and potentially sensitive data — may be processed incidentally. In such a case, Vendy Studio reserves the right to delete the content concerned and/or to restrict access to the Service in accordance with the Terms.

3. PURPOSES AND LEGAL BASES

Data is processed for the following purposes:

  • Provision of the Service (account creation, image generation, credit management) – Performance of the contract;
  • Management of payments and fraud prevention – Performance of the contract / legitimate interest;
  • Security and stability of the Platform – Legitimate interest;
  • Audience measurement (Google Analytics) – Consent;
  • Improvement of the Service (aggregated statistics) – Legitimate interest;
  • Communications relating to the Service – Performance of the contract;
  • Commercial prospecting (where applicable) – Consent.

4. RECIPIENTS OF THE DATA

We use providers acting as processors within the meaning of the GDPR, to provide the Service:

  • Hosting / infrastructure: Vercel (hosting of the application, technical logs).
  • Database & storage: Supabase (storage of garment photographs and generated images, database).
  • Image generation: Google (GenAI) (generation of images from garment photographs).
  • Audience measurement: Google (Google Analytics) (Platform traffic statistics).
  • Payment: Stripe (payment processing and fraud prevention).
  • E-mail: OVH (sending of transactional and support e-mails).

We may also share certain data with providers strictly necessary for security (fraud prevention, abuse mitigation) and the proper functioning of the Service.

No data is sold or rented to third parties.

5. TRANSFERS OUTSIDE THE EUROPEAN UNION

Some of our providers may process data outside the European Economic Area (in particular depending on hosting, infrastructure or support operations).

Where such transfers take place, we rely on appropriate safeguards within the meaning of the GDPR, in particular the European Commission's standard contractual clauses (SCC), and, where necessary, supplementary measures.

You may request information about these safeguards by writing to contact@vendystudio.fr.

6. RETENTION PERIODS

  • Account data: duration of the contractual relationship + 3 years;
  • Payment data: legal accounting obligations (10 years);
  • Technical logs: 6 to 12 months;
  • Uploaded and generated images: the period strictly necessary to provide the Service, then deletion or anonymisation, deletion 10 days after the date of generation.
  • Marketing data: until consent is withdrawn.

7. RIGHTS OF DATA SUBJECTS

In accordance with the GDPR, you have the following rights:

  • Right of access, rectification, erasure;
  • Right to restriction and objection;
  • Right to data portability;
  • Right to withdraw your consent at any time;
  • Right to lodge a complaint with the competent data protection supervisory authority of your country of residence.

You may exercise your rights by writing to: contact@vendystudio.fr

8. DATA SECURITY

Vendy Studio implements appropriate technical and organisational measures to protect the data (access controls, encryption, key management, logging, backups).

However, no system is entirely free of risk.

9. DATA BREACH

In the event of a personal data breach likely to result in a risk to the rights and freedoms of individuals, Vendy Studio will notify the competent supervisory authority and, where applicable, the data subjects, in accordance with the GDPR.

10. AMENDMENT OF THE POLICY

This Policy may be amended at any time.

The applicable version is the one published on the Platform on the date the Service is used.