Privacy Policy
Last updated: March 28, 2026
1. Data Controller
The data controller for this service is Alexandre Grisey, located at 7 Allee de Chartres, 33000 Bordeaux, France. Company ID (SIRET): 83978643100024. For any privacy-related inquiry, contact us at pro@alexandre-grisey.fr.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your email address and authentication credentials (via email/password, Google, or GitHub OAuth). We do not store OAuth passwords — authentication is handled by Firebase Authentication.
2.2 Project & Configuration Data
You provide project configuration data including: project name, subscription provider webhook settings, Firebase Cloud Messaging (FCM) service account credentials, email sender identity, and message templates. FCM credentials are encrypted at rest using AES-256-GCM.
2.3 End-User Data
Through your use of the Service, you transmit data about your mobile application's end-users, including: user identifiers, subscription provider IDs, push notification tokens, email addresses, locale/language preferences, and subscription lifecycle events. You are the data controller for your end-users' personal data. FixMySub processes this data solely on your behalf as a data processor.
2.4 Automatically Collected Data
We collect basic analytics data through Datafa.st, which may include page views and interaction events. We do not use cookies for tracking. Firebase may set essential cookies for authentication purposes.
3. How We Use Your Information
- To provide and operate the Service, including sending push notifications and emails to your end-users on your behalf
- To authenticate your identity and secure your account
- To process subscription lifecycle events from your connected providers
- To improve the Service through aggregated, anonymized analytics
- To communicate with you about your account or the Service
4. Third-Party Services
We use the following third-party services to operate FixMySub:
- Firebase (Google) — authentication, database, hosting, cloud functions, and push notification delivery (FCM)
- SendGrid (Twilio) — email delivery on your behalf
- Datafa.st — privacy-friendly website analytics
- Heyo.so — chat widget for customer support
- Stripe — payment processing (we do not store your full card details)
Each third-party service processes data according to their own privacy policies. We encourage you to review them.
5. Data Retention
We retain your account data for as long as your account is active. Project data, including end-user data and event history, is retained for the duration of your subscription. Upon account deletion or request, we will delete your data within 30 days, except where retention is required by law.
6. Data Security
We implement industry-standard security measures including: encryption of sensitive credentials at rest (AES-256-GCM), secure HTTPS connections, Firebase security rules restricting data access, and API key authentication for external integrations. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Your Rights
Under applicable data protection laws (including GDPR if you are in the EU/EEA), you have the right to:
- Access, correct, or delete your personal data
- Object to or restrict processing of your data
- Data portability
- Withdraw consent at any time
To exercise these rights, contact us at pro@alexandre-grisey.fr.
8. Your Responsibilities as Data Controller
When using FixMySub to send communications to your end-users, you are solely responsible for:
- Ensuring you have a lawful basis to collect and process your end-users' personal data
- Obtaining any required consents from your end-users for receiving push notifications and emails
- Providing your end-users with adequate privacy disclosures
- Complying with all applicable data protection and privacy laws in your jurisdiction
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact
For questions about this Privacy Policy, contact us at pro@alexandre-grisey.fr.