Privacy policy

Data controller

The controller of your personal data is the publisher identified in the Legal notice (TATA Meubles, Tunisia).

For any question about your data: contact@tata-meubles.com. Representative in the European Union (GDPR Article 27): PLACEHOLDER — to be appointed or removed on your adviser’s advice.

Data we collect

Account: email address, name, your organisation name, password (stored encrypted, never in clear) or Google sign-in identifier.

Projects: your 3D designs, quotes, price lists and imported files, stored so you can find and share them.

Contact: name, email address and message sent through the form, plus the page language.

Technical data: IP address and connection logs, used for Service security, abuse prevention and the country used to display prices.

Purposes and legal bases

Providing the Service, creating and securing your account, hosting your projects: performance of the contract (GDPR Article 6.1.b).

Answering contact and support requests: legitimate interest and pre-contractual steps.

Sending account emails (confirmation, password reset, team invitations): performance of the contract. We send no newsletter or advertising without your prior consent.

Securing the Service, preventing abuse and bots, meeting our accounting and tax obligations: legitimate interest and legal obligation.

Recipients and processors

Your data is never sold. It is processed only by the providers the Service needs, each bound to us by a data processing agreement:

Supabase: database, authentication and project storage.

Vercel: hosting of the site and application, bot protection (Vercel BotID).

Resend: delivery of account emails and contact-form messages.

Google: Sign in with Google, if you choose it. Google receives your sign-in request and sends us your name and email address.

Administrators of your organisation see the projects and the names of their team members, according to the configured roles.

Transfers outside the European Union

Some providers (Resend, Vercel, Google) may process data in the United States or in other countries outside the European Union and Tunisia.

These transfers are covered by the European Commission’s standard contractual clauses or by the EU–US data privacy framework, depending on the provider.

Retention

Account and projects: for as long as your account is active, then deleted within 90 days after it is closed, unless the law requires otherwise.

Contact messages: 3 years from the last exchange. Billing data: the statutory retention period for accounting records.

Technical logs: 12 months at most.

Cookies and trackers

The marketing site sets no cookies and embeds no analytics. If an analytics tool is ever added, it will be cookie-free or subject to your prior consent.

The application uses your browser’s local storage to keep your session and your language: these items are strictly necessary for the Service and are not used for advertising or tracking.

Security

Encrypted connections (HTTPS), encrypted passwords, data access separated by organisation and enforced at database level. As no system is infallible, we will tell you, and the competent authority where the law requires, about any data breach affecting you.

Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection, the right to withdraw consent at any time, and the right to give instructions about your data after your death.

To exercise them: contact@tata-meubles.com. We reply within one month. We may ask for proof of identity if we doubt who you are.

You can lodge a complaint with the data protection authority of your country of residence (in France, the CNIL: cnil.fr) or with the Tunisian National Authority for Personal Data Protection (INPDP: inpdp.nat.tn).

Minors and updates

The Service is for adults and professionals; we do not knowingly collect data about people under 16.

This policy may change. The date of the last update appears at the top of the page; for any material change we will tell you by email.