Privacy Policy
Last updated: 05/06/2026
1. Data controller
Termi, headquartered at France, is responsible for the personal data collected through the Termi platform. DPO contact: [email protected].
2. Data we collect
Account data
- Email address, username and hashed password.
- Third-party identifiers and avatar if you use OAuth2 sign-in.
Billing data
- Transaction history and billing information needed to manage payments.
- We do not store your full banking details.
Technical data
- IP address and technical logs, with anonymization where applicable.
- Access logs, activity logs and session preferences.
3. Purposes and legal bases
-
Contract performance: account management, service delivery and support.
-
Legal obligation: accounting retention and regulatory requirements.
-
Legitimate interest: security, fraud prevention and continuous service improvement.
-
Consent: non-essential cookies and optional communications.
4. Your rights
You may exercise your rights of access, rectification, erasure, restriction, portability and objection by contacting [email protected]. You may also lodge a complaint with the supervisory authority in your country.
Access
Request a copy of your data.
Rectification
Correct inaccurate information.
Erasure
Request deletion of your data.
Restriction
Temporarily restrict processing.
Portability
Receive your data in a reusable format.
Objection
Object to specific processing activities.
5. Retention periods
-
Account data: for the duration of the contractual relationship.
-
Deleted data: deletion or anonymization according to applicable legal and technical timelines.
-
Technical logs: up to 365 days when retention is necessary.
-
Invoices: retained according to applicable accounting obligations.
6. Data sharing
We never sell your data. It may only be shared with providers necessary to operate the service, such as payment processors, OAuth providers and technical hosting partners.
7. Security
We implement appropriate technical and organizational measures to protect your data, including encrypted connections, secure session handling and access controls.