Privacy Policy
Last updated: February 1, 2025
1. Introduction
STUDIO ELEVEN ("we", "us", "our") is committed to protecting the privacy of users of its website portfoliogen.io ("the Website").
This Privacy Policy describes how we collect, use, and protect your personal data, in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.
2. Data Controller
STUDIO ELEVEN
12 rue de la Part-Dieu, 69003 Lyon, France
SIRET: 977 572 528 00015
Email: florian@studioeleven.cc
3. Data We Collect
We collect the following categories of data:
Identification Data
- Email address
- Name (if provided)
Portfolio Data
- Professional information (title, bio, skills)
- Projects and descriptions
- Social media links
- Uploaded images
Technical Data
- IP address
- Browser type
- Pages visited and timestamps
Payment Data
Payment data (card numbers, etc.) is processed directly by our payment provider Stripe and is never stored on our servers.
4. Purposes of Processing
Your data is used to:
- Provide the service: create and host your portfolio
- Manage your account: authentication, preferences
- Process payments: billing, subscriptions
- Communicate with you: service notifications, support
- Improve the service: anonymized usage statistics
- Comply with legal obligations: invoice retention
5. Legal Basis
The processing of your data is based on:
- Contract performance: to provide the service you ordered
- Consent: for marketing communications (you can withdraw it at any time)
- Legitimate interest: to improve our services and prevent fraud
- Legal obligation: for billing data retention
6. Data Recipients
Your data may be shared with:
Technical Sub-processors
- Vercel (USA): website hosting - Privacy Policy
- Neon (USA): database - Privacy Policy
- Stripe (USA): payments - Privacy Policy
- Resend (USA): email delivery - Privacy Policy
- OpenAI (USA): AI content generation - Privacy Policy
These providers are subject to standard contractual clauses or are certified for data transfers to the United States.
7. Data Retention
- Account data: retained for the duration of your account + 3 years after deletion
- Portfolio data: retained as long as the portfolio is active
- Billing data: 10 years (legal requirement)
- Technical logs: 12 months
8. Your Rights
Under the GDPR, you have the following rights:
- Right of access: obtain a copy of your data
- Right to rectification: correct inaccurate data
- Right to erasure: request deletion of your data
- Right to portability: receive your data in a structured format
- Right to object: object to certain processing
- Right to restriction: limit the processing of your data
To exercise these rights, contact us at florian@studioeleven.cc
You may also file a complaint with your local data protection authority. In France: www.cnil.fr
9. Cookies
We only use essential cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| session | Authentication | 30 days |
No advertising or third-party tracking cookies are used.
10. Security
We implement technical and organizational measures to protect your data:
- HTTPS/TLS encryption for all communications
- Secure authentication (magic links)
- Hosting on certified infrastructure (SOC 2)
- Restricted and logged data access
11. Changes
This policy may be modified. In case of substantial changes, you will be notified by email or notification on the website. The last update date is indicated at the top of this page.
12. Contact
For any questions regarding this policy or your personal data: florian@studioeleven.cc