Privacy policy

NotiPro (NotiChess) is committed to protecting your privacy. This privacy policy explains how we collect, use and protect your personal data.

Data controller

Company name: NotiPro

Address: 2 avenue du président Pierre Angot, 64000 Pau, France

Email: contact@notidev.com

Data we collect

1. Data you provide directly

When you use our feedback form:

• Email address
• Feedback message

2. Data collected automatically

While you browse the site, through two distinct mechanisms:

• Cookie-less audience measurement, which we operate ourselves: pages viewed, traffic source, device type, operating system and downloads, no consent required, see the “Cookie-less audience measurement” section
• Audience statistics via Google Analytics (pages visited, duration, traffic source, browser and device type), only with your consent
• IP address: used for the duration of processing only, never stored in clear form nor logged

3. Referral program participant data

If you take part in our referral program (club or influencer):

• Identity or association name, and contact details (email, phone)
• Stripe Express account identifier (IBAN and identity verification are collected and stored by Stripe, not by NotiChess)
• Assigned referral code, and history of commissions and payments

4. NotiChess application data

NotiChess is a local application: your games, databases and analyses stay on your computer. Only the data needed for online services goes through our servers:

• Account: email address, first and last name, subscription information.
• Social features: your friends list and the messages you exchange in chat, in a direct conversation or a group. Messages are stored on our servers so they can be delivered to the other members of the conversation.
• Reports: when you report a message or a person, we record your identifier, that of the reported person, the reason, your optional comment and a copy of the reported message. This copy lets our team review the report, even if the message has been deleted in the meantime. The reported person is not informed of your report.
• Moderation: when a message is removed by our team, we keep a record of the removal (the message, its author, the date and the reason).
• Diagnostics: if the application crashes, a technical report is sent so that we can fix the problem.

How we use your data

We use your personal data to:

• Respond to your feedback and suggestions
• Improve our software and services
• Ensure the site works properly from a technical standpoint
• Run the referral program and calculate commissions
• Pay commissions and meet our accounting and tax obligations
• Provide the application features: account, subscription, friends and chat
• Review reports and enforce our Content rules
• Comply with our legal obligations

Legal basis for processing

The processing of your data is based on your consent (feedback form, audience-measurement cookies), our legitimate interest in improving our services, the performance of the contract for referral program participants (program terms) and compliance with our legal obligations, in particular accounting obligations. For the NotiChess application, it is based on the performance of the contract for the use of the application, and our legitimate interest in keeping exchanges safe (reports and moderation).

Data sharing

Your data is only shared with:

• Hostinger: Website hosting
• Google Analytics: Website audience measurement (Google Ireland Ltd), only with your consent
• Stripe: Processing of subscription payments (Stripe Payments Europe)
• Stripe Connect: Payment of program commissions via Stripe Express accounts; partners’ IBAN and identity verification are collected and handled by Stripe
• Amazon Web Services: Hosting of our cookie-less audience measurement and of our application services (AWS Europe, Paris region)
• Sentry: Crash reports for the NotiChess application (Functional Software, Inc., data hosted in the European Union)
• Amplitude: Usage measurement for the NotiChess application (Amplitude, Inc., data hosted in the European Union)

The other members of a conversation see the messages you send in it.

Program management and referral attribution are handled in-house: no third-party affiliate network has access to your data.

We do not sell or rent your data to third parties.

Data retention

Your feedback data is kept for 3 years from your last contact, unless you ask for it to be deleted sooner. Data and supporting documents relating to referral program commissions are kept for the legal retention period applicable to accounting records (10 years). Cookie-less audience measurement data is kept for 25 months at most.

Chat messages are kept for as long as the conversation exists. If you delete your account, the messages you sent remain visible to the other members of the conversation, but your name is no longer attached to them. Reports and removal records are kept for twelve months, then erased automatically.

Your rights (GDPR)

In accordance with the GDPR, you have the following rights:

• Right of access: Obtain a copy of your data
• Right to rectification: Correct inaccurate data
• Right to erasure: Delete your data
• Right to restriction: Restrict the processing of your data
• Right to portability: Retrieve your data in a structured format
• Right to object: Object to the processing of your data

To exercise these rights, contact us through our contact form.

Security

We implement appropriate technical and organisational measures to protect your data against any unauthorised access, loss or disclosure. All communications are encrypted via HTTPS.

Cookie-less audience measurement

Alongside Google Analytics, we run our own audience measurement, which neither writes nor reads any information on your device: no cookie, no local storage, no session storage. It therefore does not require your consent and is not covered by the banner. Your visit is counted using a technical identifier derived from your IP address and your browser, combined with a secret key that is regenerated every night and destroyed in the same move: from one day to the next, two visits can no longer be linked to the same person. Your IP address is neither stored nor logged. The resulting data is purely statistical (pages viewed, traffic source, device type, operating system, downloads), is used solely to improve this site, is never shared with a third party nor combined with any other processing, and is kept for 25 months at most. This setup meets the conditions for consent exemption laid down by the French CNIL for audience measurement (deliberation no. 2020-091).

Cookies

This site uses audience-measurement cookies via Google Analytics to understand how the site is used and to improve it. These cookies are only set with your consent, collected via the banner shown on your first visit. You can change or withdraw your choice at any time via the “Manage cookies” link in the footer. No advertising or tracking cookies are used. Data may be transferred to the United States (Google) under the Standard Contractual Clauses.

Changes to this policy

We reserve the right to change this privacy policy at any time. Changes take effect as soon as they are published on this page. The date of the last update is shown at the top of this page.

Contact us

For any questions about this privacy policy or the use of your personal data, you can contact us through our contact form or by email at contact@notidev.com.