Privacy policy

Data controller

Kévin Jacquet, sole trader trading as PalletLab, 25 rue de Ponthieu, 75008 Paris, France, SIRET 109 722 835 00013.
Contact for any question about data: contact@palletlab.fr.

PalletLab has not appointed a data protection officer. For any question about personal data protection or to exercise your rights: contact@palletlab.fr.

In short

• The palletlab.fr site sets no advertising or analytics cookies and builds no advertising profile.
• Your working data in the software (models, quotes, customers, prices) stays on your computer. The publisher has no access to it.
• We only collect data in a few specific cases: the free trial, the licence and payment for your subscription, and the reports you choose to send from the software.
• What our servers keep is encrypted: no licence key, e-mail address or IP address can be read there.
• The AI assistant is optional and works with your own Anthropic key. What you send it is passed on to Anthropic and never kept by the publisher.
• We neither sell nor rent any data, and we send no automated marketing.

1. The palletlab.fr website

The site is made of static pages hosted by Cloudflare. It uses no audience measurement tool, loads no third-party script and performs no targeted advertising. Fonts and the demo video are served from the site itself, without calling any third-party service. Some mechanisms strictly necessary for the operation and security of the site may be implemented by the host, which protects the site against abuse.

Like any host, Cloudflare processes technical connection data (IP address, browser, requested pages, timestamps) to deliver the pages and protect the site. These logs are kept by Cloudflare for a short time, under its own policy, and the publisher makes no use of them. Legal basis: legitimate interest in ensuring the operation and security of the site.

2. Free trial

The 7-day free trial is started from the software. A six-digit code is sent to the e-mail address you enter, to check that it belongs to you.

Data processed: your e-mail address, the code sent (kept as a fingerprint and erased at most one hour later), the name of your computer, two fingerprints of your computer calculated on your machine, one from its hardware identifier, the other from its name, your session and its network adapter (these fingerprints do not directly contain the original hardware information), the start and end dates of the trial, the days on which the software contacted our server (the date only, with no time, no duration and nothing from your work), and a fingerprint of the network address from which the trial is opened.

Purpose: to open your trial, limit it to one trial per e-mail address and per computer, limit the number of trials started from the same network, and know how the software is actually used so we can offer you help at the right time.

Legal basis: steps taken at your request prior to a possible contract (Article 6(1)(b) GDPR) and legitimate interest in preventing misuse of the free trial and in improving the support we offer (Article 6(1)(f)).

Recipients: the publisher only. The data is stored, encrypted, on the licence server hosted by Cloudflare. The code is sent through the publisher's business e-mail service.

Retention period: thirty-one days for the network hash. Twenty-four months after the end of the trial for the other data, so that the same computer or address cannot start a new trial, after which it is deleted. If you subscribe, it becomes part of your licence data.

3. Licence and software checks

The software checks your licence with our server when it starts. Between two checks, it works without a connection.

Data processed: your licence key, the plan subscribed to and its end date, the buyer's e-mail address, and for each activated computer, the two hashes described above, the computer's name, the dates of first and last use, to within six hours, and the days on which the software contacted our server (the date only, with no time, no duration and nothing from your work).

Purpose: to check that the licence is valid, enforce the number of seats in your plan, let you free up a seat, and know how our software is actually used so we can offer you help at the right time.

Legal basis: performance of the subscription contract (Article 6(1)(b) GDPR) and legitimate interest in improving the support we offer (Article 6(1)(f)).

Recipients: the publisher only. The data is stored, encrypted, on the licence server hosted by Cloudflare.

Retention period: for the duration of the subscription, then twelve months after it ends, so that you can resume it without losing your seats.

The software also transmits the installed version and your computer's IP address when it checks palletlab.fr for an update. These exchanges go through Cloudflare under the same conditions as browsing the website. The publisher keeps none of it.

The first time the software starts on a computer, and only once, it sends an anonymous signal to our download portal: the name of the software, its version and the operating system (Windows or macOS). This signal contains no licence key, no computer identifier and no e-mail address. It is used only to count how many downloads lead to an installation. The IP address is not recorded: a non-reversible fingerprint, derived from it and renewed every day, is used only to discard repeated submissions, and is then erased. Legal basis: the publisher's legitimate interest in measuring the use of its software (Article 6(1)(f) GDPR).

On Windows, when you uninstall PalletLab software, a window asks you why, in one click. Answering is optional. If you choose to send your answer, the uninstaller transmits to our download portal the name of the software, its version, the language of the window, the reason you chose and, if you wrote one, your comment. Nothing else: no licence key, no computer identifier, no name and no e-mail address. These answers are used only to understand why the software does not suit you and to improve it. They reach the publisher through the Discord messaging service and are kept for twenty-four months at most, then erased. The IP address is not recorded: as with the first-start signal, a fingerprint renewed every day is used only to discard repeated submissions. Please do not write any personal information in the comment. Legal basis: your consent, given by voluntarily sending the answer.

4. Purchase and payment

Subscription payments are handled by Stripe. Your bank details are entered on Stripe's payment page and are never passed on to the publisher.

Data processed by the publisher: the e-mail address, name and billing address given at purchase, the plan and billing period chosen, the subscription status (active, payment overdue or cancelled), invoices, and the technical identifiers of your customer record and subscription at Stripe.

Purpose: to collect subscription payments, create and renew your licence, and issue invoices.

Legal basis: performance of the contract (Article 6(1)(b) GDPR) and compliance with accounting and tax obligations (Article 6(1)(c)).

Recipients: the publisher and Stripe, which processes the payment under its own terms and privacy policy.

Retention period: ten years for invoices and accounting records, in accordance with accounting and tax obligations. For the duration of the subscription and then twelve months after it ends for the other data.

5. Access codes for alpha testers

During the alpha version, each tester was given a personal access code to download the software.

Data processed: the code, the name and e-mail address it was issued to, its issue and expiry dates, and the date it was last seen in use.

Purpose: to know who a code was issued to, to renew or revoke it, and to link a report to its author.

Legal basis: performance of the trial programme terms you accepted when requesting access.

Retention period: validity of the code, then twelve months.

Trial requests received through the site form (name, company, e-mail address, message) are kept for at most twelve months after the last exchange, then erased. Like reports, they reach the publisher through a technical service hosted by Cloudflare and through the Discord messaging service.

6. Reports sent from the software

The “Report a problem” or “Suggest an idea” window in the software sends only what you choose to send.

Data transmitted: your message, the name you enter, your company name if it is filled in the software, your access code, the software version, the operating system, and the type and dimensions of the model displayed at the time of sending. Your quotes, customers, prices and files are never transmitted.

Purpose: to fix defects and improve the software.

Legal basis: your consent, given by voluntarily sending the report.

Recipients: the publisher, through a technical service hosted by Cloudflare and the Discord messaging service, a technical channel used by the publisher.

Retention period: the development period of the software, at most twenty-four months after receipt.

7. AI assistant (optional)

The AI assistant built into the software stays disabled until you enter your own Anthropic API key. If you enable it:

• Your key is transmitted with each request through a technical service hosted by Cloudflare, which relays it without storing or logging it.
• The content you submit (questions, model description, photos or drawings you attach) is transmitted to Anthropic, PBC (United States), which processes it under its own terms and privacy policy.

Purpose: providing, at your request, the features of the AI assistant built into the software.

Legal basis: performance of the service requested by the user under the contract (Article 6.1.b of the GDPR).

Retention: PalletLab keeps no request, attachment, reply or conversation related to the AI assistant. The data is only technically relayed to Anthropic. Its processing and any retention by Anthropic are governed by the terms applicable to the Anthropic API account you use.

Avoid submitting third parties' personal data (your customers' contact details, for instance): the assistant does not need them to work.

8. Working data stays on your computer

The software saves your models, quotes, orders, invoices, customers, prices and library in your computer's local storage. It transmits them to no server. You can export them to a project file (.plab) and delete them by uninstalling the software or clearing its local data. This storage is essential to the operation of the software and is not a tracker.

You are the controller of your own customers' data that you enter in the software. The publisher has no access to it and does not act as a processor in this respect.

9. Processors and transfers outside the European Union

The technical services used are provided by the following companies:

• Cloudflare, Inc. (United States): hosting of the website, the download portal, the licence server and the technical relay services.
• Stripe Payments Europe, Limited (Ireland): subscription payments.
• OVH SAS (France): business e-mail, including sending trial codes.
• Discord, Inc. (United States): receiving reports and uninstall reasons.
• Anthropic, PBC (United States): processing of AI assistant requests, only if you activate it with your own key.

When personal data is transferred to the United States or another country outside the European Economic Area, these transfers rely, depending on the provider concerned, on an adequacy decision of the European Commission, on the EU-US Data Privacy Framework where the recipient is certified under it, on the standard contractual clauses approved by the European Commission, or on any other valid transfer mechanism provided for by the GDPR. No other transmission to third parties takes place, except where legally required.

10. Security

Exchanges with the website, the portal and the servers are encrypted (HTTPS). The data kept by the licence server is encrypted (AES-256): even someone reading the database sees no licence key, e-mail address or IP address. On your computer, the licence is also stored encrypted, with a key specific to that computer.

Licences are digitally signed and verified by the software. Technical secrets (signing and encryption keys, notification addresses) are kept server-side and never appear in the distributed software. The administration consoles are protected by a password or a token, and by the blocking of failed attempts.

To stop anyone guessing a key or a code, a network that piles up errors is temporarily blocked. Only a hash of its address is kept, for the duration of the block and at most twenty-five hours.

11. Your rights

Under the conditions laid down by the applicable regulations, you have a right of access, rectification, erasure, restriction, objection and, where applicable, a right to portability of the data concerning you. You may also withdraw your consent at any time for processing based on it, without affecting the lawfulness of the processing carried out before this withdrawal.

To exercise these rights, write to contact@palletlab.fr from the address used for your trial or purchase. We reply within one month.

If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, cnil.fr.

12. Changes to this policy

This policy is updated whenever a new processing activity is introduced. The date of the update appears at the top of the page, and substantial changes are announced in the software.