Privacy Policy

Last updated : 29/08/2026

1. Data controller

Mandragore Learning, published by Mandragore Planète, is responsible for processing personal data collected on this site. For any question, contact contact@mandragore.app.

2. Data collected

Depending on your use of the site, we collect:

• Account data: email, password (encrypted), purchase and recharge history
• Billing data: full name and postal address (street, postal code, city, country), transmitted directly to our payment provider Stripe at each payment, in order to issue an invoice compliant with tax obligations; this information is then communicated to us by Stripe and stored in your account
• Banking payment data: processed exclusively by Stripe, never stored on our servers
• Stripe Customer ID: a technical identifier associated with your account, allowing your billing information to be retrieved for a future purchase or recharge
• Purchase and invoice history: each purchase and credit recharge generates a history entry viewable from your customer area, with a link to the corresponding PDF invoice issued by Stripe
• Workspace usage data: exchanges with the AI assistant, remaining credit balance, learning progress
• Technical data: IP address, browser type, pages visited (audience measurement cookies)

3. Purposes of processing

• Creation and management of your user account
• Processing of orders, credit recharges, and invoicing in compliance with tax law
• Access to purchased training workspaces and credit consumption tracking
• Service improvement and audience measurement (with your consent)
• Communication regarding your account, purchases, or invoices

4. Legal basis

Processing is based on the performance of the contract (account creation, sale, invoicing), a legal obligation (retention of invoices per tax and accounting deadlines), consent (non-essential cookies), and legitimate interest (security, fraud prevention).

5. Retention period

Account data is retained as long as the account is active, then archived in accordance with accounting and tax obligations (invoices in particular, retained for 10 years under French law). Banking payment data is managed directly by Stripe according to its own retention policy; Mandragore Learning never stores it.

6. Your rights

In accordance with the GDPR, you have the right to access, rectify, erase, restrict, port, and object regarding your personal data, including your billing information. To exercise these rights, contact contact@mandragore.app. You also have the right to lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority.

7. Cookies

This site uses cookies essential to its operation (login, user session) as well as audience measurement cookies subject to your consent. You can change your choice at any time by clearing your browser's browsing data for this site.

8. Sub-processors

Stripe (payment processing, invoicing, and storage of the associated customer identifier), Bidouchat.ai (hosting and operation of AI training workspaces). These providers are contractually bound to protect your data in accordance with the GDPR.

9. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure. Access to each training workspace is systematically verified (account, ownership, credit balance) before any content is displayed.

This document is a basic template and does not replace legal advice. We recommend having it validated by a legal professional before final publication, particularly to verify compliance with your actual data processing and sub-processors.