Privacy Policy

This policy explains what personal data Cosio collects and why, in line with the EU General Data Protection Regulation (GDPR). The data controller is Estelle Couturier — see our Legal notice for full publisher details.

1. What we collect

Account data: name, email address, and profile picture (if you sign in with Google). Usage data: the rooms, boards and lessons you create, and their content (drawings, text, uploaded files). Billing data: for paid plans, our payment processor Stripe handles and stores your payment details — we never see or store your card number ourselves.

2. Why we collect it

To create and run your account, provide the video classroom and whiteboard service, process payments for paid plans, and send you service emails (booking confirmations, receipts). We do not use your data for advertising and do not sell it to third parties.

3. Who we share it with

Only the service providers needed to run Cosio: Stripe (payments), Cloudflare (hosting and file storage), Resend (transactional email), and Neon (database hosting). Each acts strictly on our instructions and under their own data protection commitments. We never share your data for marketing purposes.

4. How long we keep it

For as long as your account is active. If you delete your account, your personal data is deleted within a reasonable time, except where we are legally required to keep billing records for longer (French accounting law requires invoices to be kept for several years).

5. Cookies

We use a single strictly necessary cookie to keep you signed in. We do not use advertising or analytics cookies.

6. Your rights

Under GDPR you can access, correct, delete, or export your personal data, and object to or restrict its processing. To exercise any of these rights, contact us at cursily@gmail.com. You can also lodge a complaint with the CNIL (cnil.fr), the French data protection authority.