Legal Notice and Privacy Policy

The Carvizia website (carvizia.com) is protected by intellectual property law. It is published and run by:

• Identity: THERY-CAULIEZ Martin
• Trading name: Carvizia
• SIRET number: 83799424300025
• VAT: VAT not applicable, article 293 B of the French General Tax Code
• Contact: contact@carvizia.com
• Publication director: THERY-CAULIEZ Martin

The website is hosted by:

• Application: Vercel Inc. — 440 N Barranca Ave #4133, Covina, CA 91723, United States — https://vercel.com
• Database and authentication: Supabase Inc. — 970 Toa Payoh North #07-04, Singapore 318992 — https://supabase.com

The domain name is managed by OVH SAS (2 rue Kellermann — 59100 Roubaix — France).

All the elements of the Carvizia website (text, graphics, software, photographs, images, names, logos, trademarks, databases, etc.) and the website itself are protected by French and international copyright and intellectual property law.

These elements are the exclusive property of THERY-CAULIEZ Martin, except for elements created by third parties who have not assigned their rights and the logos of partner companies (including Stripe and Google). Any reproduction, representation, modification, publication or transmission of all or part of the website or its content, by any means, is strictly prohibited without the publisher's prior written permission.

To run Carvizia, the publisher collects and processes personal data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

A. Purpose

The data collected (name, email address, optional profile photo) is used solely to create user accounts, manage access to reports, invoicing and customer support.

B. Processors and security

To ensure a high level of security, Carvizia relies on trusted, certified providers:

• Authentication and storage (Supabase): account creation, password management, session security and application data storage are handled by Supabase, with optional Google sign-in.
• Payments (Stripe): financial transactions are handled by Stripe Inc. No card data passes through or is stored on Carvizia's servers. Stripe is a PCI-DSS compliant payment processor.

C. Retention period

Personal data is kept no longer than necessary for the purposes for which it was collected, and at most 3 years after the user's last activity on their account. Billing data is kept for 10 years (legal obligation).

D. Your rights

Under the applicable regulations, each user has:

• A right of access to and rectification of their data.
• A right to erasure (right to be forgotten) and to restriction of processing.
• A right to data portability.

To exercise these rights, email contact@carvizia.com. We will reply within one month at most.

The Carvizia website uses cookies and similar technologies that are essential to its operation.

• Session and security cookies: they keep the user securely signed in and protect the account. They are strictly necessary for the service and therefore exempt from prior consent.
• Preference storage: local storage keeps only the user's theme (light/dark) and country choice. It contains no personal data.

The publisher strives to provide information and reports on Carvizia that are as accurate as possible. The publisher cannot however be held liable for omissions, inaccuracies or failures to update, whether caused by the publisher or by the third-party partners who provide this information. Users use Carvizia reports entirely at their own risk.

Any dispute relating to the use of the Carvizia website is governed by French law. Except where the law provides otherwise, the competent courts of Lyon have exclusive jurisdiction.