Privacy policy

Data controller

Marcos Suarez Romero (MARKPAPER), 2 rue Pierre Curie, 94270 Le Kremlin-Bicêtre, France, is the controller of the personal data collected on marcospapermache.com. For any question: contact@marcospapermache.com.

Data we collect

Depending on how you use the site:

• Customer account: email address, password (stored encrypted), and where applicable your name.
• Orders: billing and shipping addresses, order history.
• AI image generation: the descriptions (prompts) you enter, the generated images and your credit balance.
• Payment: payments are processed by Stripe and PayPal. We do not collect or store your card details.
• Technical data: IP address, connection and browsing data, cookies.

Purposes and legal bases

• Account management and order fulfilment — performance of the contract.
• AI image generation feature — performance of the contract.
• Responding to your contact requests — legitimate interest / pre-contractual measures.
• Any marketing communications — your consent.
• Security, fraud prevention and accounting obligations — legitimate interest / legal obligation.

Recipients and processors

To provide the service, we rely on processors that handle certain data on our behalf:

• Supabase — authentication and database (hosted in the EU).
• Stripe and PayPal — payment processing.
• OpenAI — image generation: the descriptions you enter are sent to OpenAI to produce the images. Do not include any sensitive personal data in them.
• Resend — sending transactional emails.
• Vercel — website hosting.

Transfers outside the European Union

Some processors (OpenAI, Resend, Vercel, and Stripe's parent company) are located in the United States. These transfers are covered by appropriate safeguards, in particular the European Commission's Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

Retention period

Your data is kept for as long as necessary for the purposes described, then deleted or archived in accordance with applicable legal periods (in particular accounting obligations relating to orders).

Your rights

In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time and to set instructions regarding your data after your death. To exercise them, write to contact@marcospapermache.com. You may also lodge a complaint with the CNIL.

Cookies

We use cookies that are necessary for the site to function and, subject to your consent, audience-measurement cookies. You can manage your preferences via the cookie banner or your browser settings.

Minors

This website is not intended for minors under 15 without the authorisation of the holder of parental authority.

Security

We implement appropriate technical and organisational measures (encryption, access control) to protect your personal data.

Changes

This policy may be updated. The date of the last update is shown at the bottom of the page.