Privacy policy

Last updated: Last updated: 7 October 2026

This English version is provided for convenience. The French version (Politique de confidentialité) is the binding one.

This policy describes the personal data Partage processes, why, which providers take part and the rights you have.

1. Data controller

The data controller is:

  • L'Alternative Fabrique, sole proprietorship, publisher of Partage
  • 8 route de la Taoulère, 64400 Eysus, France
  • SIRET: 823 762 653 00033
  • Email: contact@partagg.fr

2. Data processed

Data you provide:

  • email address and password (hashed): account creation and authentication;
  • display name, when provided;
  • credentials and access tokens of the platform accounts you connect (LinkedIn, Bluesky, Dev.to): publishing on your behalf;
  • billing information, when you subscribe to a paid plan.

Data produced by using the service:

  • drafts, per-platform variants, versions, imported blog articles, campaigns and publishing schedule;
  • writing-voice profiles, brand context (identity, product material, strategy) and generated or uploaded illustrations;
  • voice notes dictated in the editor, sent to transcription without being stored;
  • publishing outcome and, where the platform exposes them, reactions and replies to your posts;
  • subscribed plan, subscription state, quota usage;
  • technical logs (requests, errors, traces), including from the browser.

Data collected automatically:

  • IP address: security, abuse prevention, rate limiting;
  • strictly necessary cookies, described in the cookie policy.

3. Purposes and legal bases

ProcessingLegal basis
Account management and authenticationPerformance of the contract
Generation of variants and illustrations, import, scheduling and publishing to the connected platformsPerformance of the contract
Billing and paymentPerformance of the contract and legal accounting obligation
Security, abuse prevention, technical logsLegitimate interest
Transactional email (verification, sign-in, recovery)Performance of the contract

Partage sets no analytics or advertising cookie, does not sell your data and does not use it for profiling.

4. Recipients

The following providers act as processors, strictly within the purposes described above:

ProcessorRoleLocation
OVH SASHosting of the servers and database; backups (object storage, Gravelines region); voice-note transcription (Whisper) and image analysis through OVHcloud AI EndpointsRoubaix, France (EU)
Scaleway SASContainer image registry (no user data); language models used for text generation, through the Cortex service described belowParis, France (EU)
Black Forest LabsIllustration generation from the descriptions produced for your writings; only the image description is sent, never your account dataGermany (EU)
Mollie B.V.Payment processingAmsterdam, Netherlands (EU)

The following services are built and operated by L'Alternative Fabrique, publisher of Partage. They are not third parties, but your data passes through them; all are hosted in France at OVH SAS:

ServiceRoleData involved
UrbangateIdentities, sessions and transactional emailEmail address, hashed password, display name, sessions
LungorBilling: plan catalogue, subscriptions, quotasAccount id, email address, plan, billing history
Cortex (api.lalter.fr)Orchestration of the language agent that produces the variants and illustration descriptionsDrafts, writing-voice profile, brand context, imported content
TornadFetching and rendering web pages for blog importURL and content of the imported pages
vvavesAudio reading (narration) of your writingsText of the writings you have read aloud
SkalpaiTechnical logs, traces and feedback, including from the browserRequest logs, errors, account id, content of the feedback you send

Finally, the platforms you connect yourself — LinkedIn (Microsoft, United States), Bluesky PBC (United States), Dev.to / Forem (United States) — receive the content you decide to publish there and issue the access tokens you entrust to us. They process them under their own terms, as separate data controllers.

5. Transfers outside the European Union

Hosting, backups, text and illustration generation, transcription, payment and email are all carried out within the European Union. No font or script is loaded from a third-party server.

The only transfers outside the European Union are the ones you request yourself by publishing to LinkedIn, Bluesky or Dev.to, whose services are established in the United States: they are the very purpose of the service and receive only the content you scheduled.

6. Data sent to model providers

To produce the variants, your drafts, writing-voice profile, brand context and imported content are sent to the language model provider named in section 4; to produce illustrations, only the image description is sent to the image model provider. No identifying data (email address, name) is sent in that process. Partage does not use your content to train models.

7. Connected platform tokens

The access tokens and app passwords of the platforms you connect are encrypted at rest. They are used only to publish on the accounts you explicitly connected and to read reactions to your posts. They are deleted when you disconnect the platform and when your account is deleted. Where the platform allows it, the token is also revoked with the platform; for Bluesky and Dev.to, which offer no such endpoint, revoke the app password or key from your account on the platform.

8. Retention

DataRetention
Account, drafts, variants, profiles, brand context, campaigns, media, platform tokensLifetime of the account. Deleting the account (Settings) erases all of this data and ends the subscription.
Billing recordsStatutory retention period for accounting records
Technical logs and traces (Skalpai)15 days
CookiesSee the cookie policy

9. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, object to and port your data.

  • Erasure: from your account, Settings, "Delete my account". Deletion is immediate and irreversible.
  • Portability: each writing can be exported as Markdown from its page, and each campaign from its own. There is no full account export yet; you may request one by email.
  • Other requests: write to contact@partagg.fr stating the address associated with your account and the right you wish to exercise.

You receive an answer within one month. If you believe the processing of your data does not comply with the regulation, you may lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

10. Security

  • encrypted communications (HTTPS/TLS);
  • hashed passwords;
  • platform tokens encrypted at rest with a master key held apart from the database;
  • data access restricted to what is strictly necessary;
  • hosting and backups in France, in the European Union (OVH SAS).

11. Changes

This policy may change. In case of a substantial change, you are informed by email at least fifteen days before the new version takes effect. The last-updated date is shown at the top of this page.