Privacy policy — Mestryx Platform
Scope
This notice applies to the marketing site https://mestryx.dev and contact requests sent to [email protected]. Demo applications (https://demo-admin-platform.mestryx.dev, https://demo-web-platform.mestryx.dev) may process additional merchant data under separate notices when offered as a service.
Data controller
Controller: Mestryx (sole proprietorship registration in progress). Contact: [email protected] SIRET: pending — AE September 2026.
Data collected
Depending on your actions, we may process: • Technical logs: IP address, browser type, pages viewed, timestamps (server and analytics, if consented). • Contact data: email address and message content when you write to [email protected]. • Cookie preferences: your analytics consent choice stored locally. We do not use Google Analytics or advertising trackers on this site.
Purposes
• Operate and secure the website (necessary cookies and server logs). • Measure audience in aggregate form with self-hosted Umami analytics, only after consent. • Respond to contact requests. • Improve the product and prepare commercial launch (CRE / AE 2026).
Legal basis (GDPR)
• Legitimate interest: site security, abuse prevention, aggregated statistics where consent is not required. • Consent: analytics cookies (Umami) — you may refuse or withdraw consent at any time via cookie preferences. • Pre-contractual measures / contract: answering contact messages related to a potential service.
Analytics (Umami)
With your consent, we use Umami — a self-hosted, privacy-oriented analytics tool. It does not use cross-site tracking, does not sell data, and does not rely on Google Analytics. IP addresses may be truncated or not stored depending on instance configuration. You can accept or refuse analytics via the cookie banner or preferences page.
Cookies
See our Cookie policy for details. Necessary cookies support basic operation and consent storage. Analytics cookies are optional and disabled until you consent.
Recipients and transfers
Data is processed by Mestryx and hosting subcontractors (VPS / Dokploy). Analytics data stays on our self-hosted Umami instance (umami.mestryx.dev). No routine transfer outside the European Economic Area is planned; if this changes, this notice will be updated.
Retention
• Server logs: limited duration (typically up to 12 months unless a security incident requires longer retention). • Umami analytics: aggregated event data retained according to our self-hosted instance policy (typically up to 24 months). • Contact emails: retained for the time needed to handle your request and any follow-up, then archived or deleted.
Your rights
Under GDPR you may request access, rectification, erasure, restriction, objection, and portability where applicable. To exercise your rights or lodge a complaint: [email protected]. You may also contact your local supervisory authority (CNIL in France).
Contact
Data protection contact: [email protected]