Privacy Policy

The data controller for your personal data is UCTF, located in France. You can reach us at contact@uctf.io.

When you sign in with GitHub OAuth, we collect the following information from your GitHub profile:

• Email address: for account identification and communication.
• Username: displayed in your profile and organization memberships.
• Avatar URL: displayed alongside your profile.

We also collect:

• Usage data: pages visited, actions performed, and timestamps for service operation and improvement.
• Payment information: processed and stored by Stripe; we do not store your full payment card details.

We process your personal data for the following purposes:

• Contract performance: operating your account and providing the Service.
• Legitimate interest: improving the Service, preventing abuse, and ensuring security.
• Legal obligation: complying with applicable laws and regulations.

We retain your personal data for as long as your account is active or as needed to provide you the Service. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion of your personal data.
• Portability: receive your data in a structured, machine-readable format.
• Object: object to processing based on legitimate interest.
• Restrict processing: request limitation of processing in certain circumstances.

To exercise any of these rights, contact us at contact@uctf.io. We will respond within 30 days.

You also have the right to lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr.

We use cookies to operate the Service. For details on the cookies we use and how to manage them, see our Cookie Policy.

We share data with the following third-party services:

• GitHub: authentication via OAuth. Subject to GitHub's Privacy Statement.
• Stripe: payment processing. Subject to Stripe's Privacy Policy.

Your data may be transferred to and processed in countries outside the European Economic Area (EEA) by our third-party providers. These transfers are protected by appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new "Last updated" date.

For questions about this Privacy Policy, contact us at contact@uctf.io.