Privacy policy
Last updated: 16 October 2026
This English translation is provided for convenience; the French version prevails.
This policy explains what personal data Intelectra processes when you visit getbouraq.com and use Bouraq, why, for how long, and what your rights are.
Controller
Intelectra, 41 C avenue de Corbeil, 77000 Melun, France. Contact: contact@getbouraq.com. No data protection officer is appointed; write to this address with any question.
Data, purposes and retention
- Account: e-mail address (username), name given at payment, password stored as a hash (scrypt), dates of creation and password change. Purpose: providing the service (performance of the contract). Retention: as long as the account exists; erased when it is deleted.
- Sign-in: session cookie holding a random token, of which only a hash is stored, and the date it was last used. Purpose: keeping you signed in and protecting access (performance of the contract). Retention: 30 days at most (365 days for the command-line tool), or until you sign out.
- Transferred files: the files you send, encrypted for your account during the transfer, then rebuilt and checked on the server so that you can download them. Purpose: performance of the contract. Retention: an unfinished transfer is erased after 1 hour of inactivity; a rebuilt file, 7 days after it arrives; a file over your quota, as soon as you have collected it and after 24 hours at the latest.
- Bouraq Prism downloads: date, key version and IP address of each download of your personalised tool. Purpose: security and traceability of the copies of your key (legitimate interest). Retention: as long as the account exists.
- Security and account activity: successful sign-ins (username) and failed ones (username entered and IP address) are written to the server's technical log; attempts are counted in memory to block brute-force attacks. We also record, for each account, the days it was active, successful, failed or blocked sign-ins and transfers (number of pages and bytes), with the country looked up from the IP address, which is not kept; a failed sign-in never records the username entered. Purpose: protecting accounts and following how the service is used (legitimate interest). Retention: automatic log rotation; counters cleared after 5 minutes; account activity kept 90 days and deleted with the account.
- Transfer audit trail: for every delivery, failure or download, the account, the file's name and size, its sha256 fingerprint and the time, never the content. Purpose: letting the organisation trace transfers and detect abuse (legitimate interest). Retention: 365 days, including after the account is deleted.
- Payment and subscription: e-mail, name, billing address and payment method are collected by Stripe; we keep the payment session identifier, the plan, the e-mail, the Stripe customer and subscription identifiers and the subscription status. Card details never reach us. Purpose: selling and managing the subscription (performance of the contract) and keeping our accounts (legal obligation). Retention: the duration of the relationship, then ten years for accounting records (article L.123-22 of the French Commercial Code).
- Audience measurement: aggregate visit counters by day, language, source, campaign and country (looked up from the IP address, which is not kept), without identifiers; and linking each visit to the purchase journey (demo, pricing, payment, account creation). Purpose: improving the page and the journey (legitimate interest; you can object at any time). Retention: 90 days. Details and objection: the Measurement page.
- Language and currency: the country matching your IP address is worked out on our server from a local table to choose the initial page language and currency; it is neither sent anywhere nor kept for these purposes. If you choose a language, a cookie remembers it. You can change currency on the pricing card; your choice is then remembered for one year in the bq_currency preference cookie, without a tracking identifier.
- Messages: e-mails sent to contact@getbouraq.com are received by Cloudflare and forwarded to our Google Workspace mailbox. Purpose: answering you (legitimate interest or pre-contractual steps). Retention: three years after the last exchange.
- Return through a private repository: when you use GitHub or GitLab from Prism or the app, your access token and your files go straight from your browser to the provider you chose; they do not pass through our servers and we have no access to them. That provider's terms apply.
- Team enquiries: the form collects your work email, team size, preferred hosting, language and optional message. Purpose: answering your enquiry and preparing a quote (pre-contractual steps at your request). Only authorised administrators can read these details; they are not sent to Stripe or an automated mailing service and are deleted within 90 days. The IP address used temporarily in memory to limit abuse is not stored with the request.
- Pre-checkout and estimate requests: your email, language, offer, currency, requested estimate and optional reminder choice are kept separately from audience measurement for at most 90 days. Your email is prefilled in Stripe if you proceed to payment. Your requested result can be emailed once when the sending service is configured. Up to three reminders after checkout expiry are prepared only with explicit agreement and stop after payment or unsubscribe. The service and result do not depend on that agreement. Purposes: answering your request (pre-contractual steps) and optional reminders (consent). No automatic sending works without configured email transport.
Recipients and processors
Your data is never sold or rented. Only authorised staff of Intelectra have access to it, and our processors, each for its own part:
- Hetzner Online GmbH: hosting of the website, the application and the data, in its Helsinki data centre (Finland, European Union);
- Stripe Payments Europe, Ltd. (Ireland): payment and subscription management;
- Cloudflare, Inc. (United States): domain names and reception of e-mails sent to contact@getbouraq.com;
- Google Ireland Limited: the Google Workspace mailbox that receives those e-mails.
Some of these providers or their own processors may process data outside the European Union, in particular in the United States. These transfers rely on appropriate safeguards: the EU-U.S. Data Privacy Framework adequacy decision for certified companies, or the European Commission's standard contractual clauses.
Security
Connections are encrypted (HTTPS). Passwords are stored as hashes (scrypt). Your files are encrypted for your account (XSalsa20-Poly1305) while they pass through your phone's camera. Access to the servers is restricted.
Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, the right to withdraw your consent at any time, and, under French law, the right to give instructions about your data after your death. To exercise them, write to contact@getbouraq.com from your account's address; we answer within one month.
From your space you can at any time download all your data as one ZIP file (account, devices, authorisation, your audit-trail entries, a signed receipt per transfer and every file still present), even after a subscription ends, and close your account yourself: everything is then deleted, except the audit-trail entry recording the closure and the billing data the law requires us to keep.
You can ask for your account to be deleted by e-mail: your account data and pending files are then erased, except the records the law requires us to keep.
You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with the authority of your country of residence.
Changes
We may update this policy; the date at the top of the page shows the version in force. If the change is significant, we tell you by e-mail.