Privacy policy

Preamble

PrivateCore is built on a simple principle: your data must stay with you. This policy distinguishes two separate scopes : the public marketing website, and the software we install on your Mac Mini. The rules differ.

On the privatecore.fr website

• Zero third-party tracker. No Google Analytics, no Meta pixel, no Hotjar, no third-party behavioural analytics.
• Zero cookie. The site no longer sets any cookie, not even a technical one. The legacy pc_consent cookie, set by the consent banner of earlier versions of the site, is automatically removed from your browser when you visit.
• Server-log audience measurement, no cookie, no script. We analyse the technical logs of our own server (page viewed, date, country of origin, browser) to count visits in an aggregated, anonymised way: IP addresses are truncated in the statistics and nothing is cross-referenced with third parties. This measurement drops no cookie, runs no tracking script in your browser, and is processed entirely on our own server in France. Raw logs are purged after 30 days.
• /order form. Data you enter (name, email, phone, need) is forwarded by email to [email protected] and stored nowhere else. We do not share it with any third party.

On the PrivateCore service

Once PrivateCore is installed at your location, your data (customers, employees, invoices, photos, messages, etc.) remains physically on your Mac Mini. It never transits our servers.

• No default GDPR processor relationship. We are not a processor under article 28 of the GDPR for this data : it is not entrusted to us.
• Remote support only upon invitation. When you request assistance (failure, configuration), you explicitly enable access through Tailscale. Access is recorded in an encrypted, immutable audit log you can review at any time.
• Software updates. They are cryptographically signed and verified by your Mac Mini, and neither read nor carry any user data.

Your GDPR rights

Under articles 15 to 22 of the General Data Protection Regulation, you have rights of access, rectification, erasure, portability, restriction and objection regarding the data we hold about you (mainly: your contact address if you have written to us).

To exercise these rights, email [email protected]. We respond within 30 days at most.

Retention periods

• Contact emails: 3 rolling years from the last exchange, then automatic purge.
• Web server technical logs (privatecore.fr): 30 days, then automatic purge. Only aggregated, anonymised statistics are kept beyond that.
• Remote intervention logs: 90 days, then irreversible purge.
• Billing data (subscription): 10 years in line with French accounting obligations.

Transfers outside the European Union

No personal data transfer outside the EU takes place as part of the PrivateCore service. The privatecore.fr site is exposed to the Internet via Cloudflare Tunnel; Cloudflare only sees end-to-end TLS-encrypted traffic and stores neither PII nor customer content.

Data protection officer contact

For any question about this policy or your rights, contact our DPO at [email protected].

Supervisory authority

If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.