Privacy policy

Who is responsible

Slygo is published by Kera Consulting (SAS), 6 rue Parmentier, 78800 Houilles, France, SIRET 912 969 078 00019. Kera Consulting is the controller of your account data. For your store's customer data that Slygo receives on your behalf, you are the controller and Kera Consulting the processor: see the data processing agreement (DPA). Contact: support@slygo.fr.

What we keep

• Your account: email address, sign-in method (magic link or Google), acceptance of the terms (date and version).
• Your subscription: plan, period, trial and renewal dates, Stripe customer ID and invoices. Card details are entered into and kept by Stripe, never by Slygo.
• Your store: products, costs, sales channels, orders, ad spend and tax settings you enter, import or connect.
• Connections: the connected account's identifier (Shopify store, Meta ad account) and an encrypted access token. No personal data about your customers beyond what the DPA describes (no names, emails or addresses).

Why, and on what basis

• Providing the service (calculating and showing your net profit, syncing connections): performance of the contract.
• Securing the service and preventing abuse: legitimate interest.
• Billing the subscription and keeping our accounts: performance of the contract and legal obligation.

Your data is never sold, rented or used for advertising.

Where it is hosted

• App: OVHcloud, in France.
• Database and authentication: Supabase, data centre in Ireland (EU).
• Sign-in and notification emails: Resend.
• Payment and invoices: Stripe (Stripe Payments Europe, Ireland).

Only what is necessary is shared with them.

How long

• Account and store data: as long as your account exists, then deleted when you delete it.
• After a trial ends without a subscription: store data is kept for 30 days, then deleted after a reminder email.
• Invoices and billing data: 10 years, as required by the French Commercial Code.
• Connection tokens: erased as soon as you remove the connection or the connected service revokes it.
• Technical log of notifications received from connected services: 30 days.
• Technical backups: erased according to their rotation cycle.

Cookies

Only necessary cookies: your sign-in session, language, theme, the store shown and, for ten minutes, a security code while connecting Shopify or Meta. No advertising or analytics cookies, so no consent is requested. Funnel traffic (Pricing page visits, trial clicks, the app's main steps) is counted anonymously, on the server: each pass is recorded without a cookie, IP address or identifier, with only the step, the date, the language and the campaign source (utm_source) if the link carries one. To count the app's steps only once, Slygo only notes that your account has passed them, without a date; this mark is deleted with your account.

Browser extension

On the pages of the sites listed at installation (Alibaba, AliExpress, 1688, Amazon, Etsy, Cdiscount) and on stores you enable one by one, the extension reads the title, price and picture of the product shown, locally in your browser. Nothing is sent to Slygo unless you click to save an idea or a listing.

Your rights

You can access, correct, export (CSV export in the app), object to the processing of or delete your data: delete your account from Settings, or write to support@slygo.fr. You can also lodge a complaint with the CNIL (cnil.fr).