Last updated: 2026-02-03
1. Data Controller
The data controller is **WISHTECH** (contact: contact@aiskillnotebook.com).
2. Personal data we process
2.1 Account data
- Account identity (email, user ID), hashed password, settings.
- Login logs (date/time, IP address, technical information) to secure access.
2.2 Purchases & subscriptions
- Order history, subscription status, billing (amounts, taxes).
- Transaction identifiers and receipts (payment is processed by Stripe).
2.3 Creator data
To review and approve creators, we collect and verify identity and/or business information (e.g., name/company name, address, supporting documents, tax information where applicable).
2.4 Technical & support data
- Diagnostics (crash reports, technical logs), version, OS, language.
- Support messages and attachments you send us.
2.5 What we do not collect by default
The application does not automatically upload your workspace files to our servers. However, if you choose to use a third‑party AI provider and/or send content to that provider, such transfer is initiated by you and is governed by the third party’s terms and policies.
3. Purposes
- Providing the service (account, access, entitlement sync).
- Managing purchases, subscriptions, and fraud prevention.
- Creator verification, Skill publication and moderation.
- Security, improvements, and support.
- Legal compliance (accounting, disputes, regulatory obligations).
4. Legal bases
- Performance of a contract (Terms of Use / Terms of Sale).
- Legitimate interests (security, fraud prevention, service improvement).
- Legal obligations (invoicing, accounting, anti‑fraud).
- Consent, where applicable (marketing communications, non‑essential cookies, etc.).
5. Processors & recipients
- Hosting/edge delivery: Cloudflare.
- Payments: Stripe.
- Database & file storage: Supabase (DB + Storage) for app data and Skill files.
6. International transfers
Some service providers may process data outside the European Economic Area. Where international transfers apply, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) and reasonable security measures.
7. Retention (principles)
- Account: for the duration of the account, plus limited archiving where needed.
- Purchase data: kept as required by accounting and tax obligations.
- Security logs: kept for a proportionate period unless needed for incidents/disputes.
- Creator data: for the duration of the contractual relationship, plus legal archiving.
8. Security
We implement reasonable organizational and technical measures (access controls, logging, encryption in transit, hardening). Important: we cannot guarantee the security of third‑party systems chosen by the user (AI providers, external services).
9. Your rights
You may have rights of access, rectification, erasure, restriction, objection, and portability (where applicable). Contact: contact@aiskillnotebook.com. You may also lodge a complaint with the CNIL (France).
10. Updates
We may update this policy; the date at the top indicates the latest version.