Privacy policy
Last updated:
This policy describes the personal data actually processed by the SICESI website as it currently operates (beta version).
1. Data controller
The data controller is the publisher of the site:
The publisher's full identification (name, legal status, address, publication director) will be published on this page before the site opens to the public. Until then, you can reach the publisher at stevetakam97@gmail.com.
For any question about your data: stevetakam97@gmail.com.
2. Access to the site during the beta
During the beta phase, an account is required to use the site: guides, search and assistant.
Only the following pages are public: legal notice, privacy policy, accessibility, contact and emergency numbers, along with the sign-in and sign-up pages.
3. Data we process
- Account
- Your email address and password, managed by Supabase Auth. The password is stored in hashed form: the SICESI team cannot read it.
- Helpfulness votes
- Your answer (yes or no) to the question “Was this guide helpful?”, linked to your account and to the guide concerned.
- Conversational assistant
- The messages you type and the guide you are viewing are sent to OpenAI to produce the answer, only after your explicit consent, collected before the first message. Do not enter sensitive data (health, case numbers, other people's identity…). SICESI does not store conversations.
- Search
- The terms you search for are sent directly from your browser to Algolia, the site's search engine, together with your IP address.
- Feedback
- The rating, category, message and, if you provide them, your name and email address. Feedback is sent to the team by email through Resend; it is not stored in a site database.
- Technical data
- IP address and technical logs, processed by the hosting provider for the security and proper operation of the service.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, giving you access to the site | Performance of the contract (providing the service) |
| Saving your helpfulness votes | Performance of the contract (providing the service) |
| Providing the guide search | Performance of the contract (providing the service) |
| Answering your questions with the conversational assistant | Consent, collected before the first message |
| Receiving and handling the feedback you send | Consent, given in the form |
| Keeping the site secure and maintaining technical logs | The publisher's legitimate interest |
You can withdraw your consent at any time: for the assistant, from the “My account” page; for feedback already sent, by writing to us. Withdrawal does not affect processing already carried out.
5. Recipients
Your data is neither sold nor used for advertising. It is processed by the SICESI team and by the following technical providers, each for its own task only:
| Provider | Role | Data concerned | Country | Privacy policy |
|---|---|---|---|---|
| Vercel | Website hosting | IP address, technical logs | United States | Vercel policy (opens in a new window) |
| Supabase | User accounts and helpfulness votes | Email address, hashed password, helpfulness votes | Depends on the project region | Supabase policy (opens in a new window) |
| OpenAI | Conversational assistant | Messages typed into the assistant and the page being viewed | United States | OpenAI policy (opens in a new window) |
| Algolia | Search engine | Search terms, IP address | European Union / United States | Algolia policy (opens in a new window) |
| Resend | Delivery of feedback by email | Feedback content, name and email when provided | United States | Resend policy (opens in a new window) |
| Sanity | Content management for the guides | No user personal data | European Union / United States | Sanity policy (opens in a new window) |
Some of these providers are based outside the European Union, notably in the United States. These transfers are governed by standard contractual clauses adopted by the European Commission.
6. Retention periods
- Account and votes: until you delete your account.
- Feedback received by email: 12 months.
- Conversations with the assistant: not stored by SICESI.
- Technical logs: the retention period applied by the hosting provider.
7. Your rights
Under the GDPR and the French Data Protection Act, you have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability.
You can exercise your right to erasure directly from the My account page: deleting your account also deletes all the data linked to it.
For any other request, or if you prefer email, write to stevetakam97@gmail.com.
You can also lodge a complaint with the CNIL (opens in a new window), the French data protection authority.
8. Cookies and local storage
The site only uses the following cookies and local storage items, all strictly necessary for it to work:
| Name | Type | Purpose |
|---|---|---|
sb-…-auth-token | Cookie | Supabase session: keeps you signed in. |
NEXT_LOCALE | Cookie | Remembers the language you chose. |
sicesi-chat-consent-v1 | Local storage | Assistant consent: remembers that you agreed to your messages being sent to OpenAI. |
The site uses no audience-measurement or advertising trackers. As the items above are strictly necessary, they do not require your consent: this is why no cookie banner is displayed.
9. Changes
This policy may be updated. The date shown at the top of the page is authoritative.