Privacy policy

Who is responsible

The data controller is Praticlab, trade name of Kevin Steffen, sole trader (EI), 20 rue de l'Abreuvoir, 60750 Choisy-au-Bac, France.

For any question about your data: contact@cequevautmamaison.fr

What we use and why

For each use, the legal basis under the GDPR is shown in brackets.

• Account: your email address (sign-in through a link sent by email, no password) or, if you choose “Continue with Google”, the email address, name and profile picture provided by Google. Without an account you can start right away: an anonymous session is opened and your projects are attached to it. Used to sign you in and keep your projects (performance of the service).
• Garden and beds: your answers to the questionnaire (dimensions, exposure, soil, desired upkeep, young children, a dog or a cat, colours, budget), the wish you write freely, the drawn plan, the plants kept or excluded, the computed proposals. Location is reduced to the municipality and a rounded position (about 100 m for a bed, about 1 km for the garden plan): used to choose plants suited to the climate (performance of the service).
• Plot address: when you type it to find your plot, it is only used for the search and is not stored. We keep the plot outline in metres, the orientation, the municipality and a private copy of the IGN aerial view cropped to the plot (performance of the service).
• Garden photos: stored in a private space only you can read. Before storage we remove all metadata (GPS position, device, date). We only derive the nearest municipality, the shooting direction rounded to 5° and the month the photo was taken; the exact position is neither stored nor logged (performance of the service).
• Credits: balance and history (welcome bonus, credits used, refunds, unlocks). Online payment is not open yet; this page will be updated before it is (performance of the service).
• “Where to buy” clicks: retailer, plant, project and account involved, language, date. No IP address, no browser, no referring page. Used to know which links are useful and to track affiliate commissions (legitimate interest).
• AI usage log: account, project, kind of computation, cost and volume processed. Used to cap spending and prevent abuse of the free offer (legitimate interest).
• Technical logs: like any website, our hosts briefly record requests (IP address, page, date) for security and troubleshooting (legitimate interest).

We do not sell or rent any data, we do no targeted advertising and we send no newsletter. No decision with legal effects is made about you automatically: the AI suggests plants, you decide.

What the artificial intelligence services see

Bed composition (Claude, by Anthropic): we send the characteristics of the bed (style, area, exposure, climate, upkeep, children and pets, colours, budget), the list of candidate plants from the catalogue and the wish you wrote. Never your email, your address or your photos. Tip: do not write personal information in the wish.

AI image renders on your photo (fal.ai, which runs models such as Google’s Gemini or FLUX): the photo and a description of the plants are sent only for this kind of render. This option is not open to the public yet; the plan, views, seasons, PDF and photomontage are drawn by our own code, without any external AI.

These providers act on our behalf. Anthropic does not use data from its API to train its models by default; fal.ai commits in its API terms not to use its clients’ content to train or develop its products. AI spending is capped per day, per month and per account.

Who processes your data for us

These providers act on our instructions, under a data processing agreement. When they are American, transfers outside the European Union are covered by the European Commission’s standard contractual clauses.

Services you contact directly

• IGN Géoplateforme (French public mapping agency): to find your plot, your browser queries it directly with the address you type and the plot area; IGN also receives your IP address, as with any website visit.
• Google, if you choose to sign in with Google: sign-in happens at Google, under its own privacy rules.
• Retailers and affiliate networks: by clicking “Where to buy”, you leave Jardifacile. We set no cookie for them; the retailer or network may set its own on its own website.

How long

• Account, gardens and projects: as long as the account exists. An account inactive for 3 years (no sign-in and no change to a garden or project) will be deleted with all its content, after a warning email sent 30 days before.
• Projects started without an account: deleted along with the anonymous session 90 days after its last activity (session opened, last change to a garden or project), unless attached to an account.
• Garden photos: deleted 90 days after upload, during the daily clean-up (the images produced stay in the project).
• “Where to buy” clicks and AI usage log: 13 months, then anonymised (the link to the account and project is removed; only the date, the retailer or kind of computation and its cost remain).
• Hosts’ technical logs: a few days at most.

Cookies and browser storage

Jardifacile only uses cookies needed for it to work. There is no audience measurement, advertising or social network: that is why no banner asks for your consent.

• Session (Supabase “sb-…” cookies): keeps you signed in, with an account or an anonymous session; renewed on each visit, 400 days at most, cleared when you sign out.
• “jf_fusion”: 30 minutes, only when you sign in to an existing account from an anonymous session, to bring your projects over.
• “NEXT_LOCALE”: remembers the language you chose, for the duration of the visit.

Browser local storage: a flag saying an account has already been used on this device (to adapt a message) and, during the visit only, the open tab, the selected plant and the areas detected on the aerial view awaiting confirmation. These stay on your device.

Your rights

You can ask to access your data, correct it, erase it, receive it in a readable format (portability), restrict its use, object to uses based on legitimate interest and withdraw any consent at any time.

For the other rights, write to contact@cequevautmamaison.fr from your account’s email address. We reply within one month.

Account deletion: you can delete your account yourself from “My space”, with the “Delete my account” button at the bottom of the page. The account is deleted at once, with its gardens, projects, photos, images, credits and their history; the click and AI usage logs lose any link to you. A session without an account can be erased the same way (“Erase this session and its projects”). It also disappears from your browser when you clear the site’s cookies, but its projects are then no longer accessible and are deleted after 90 days.

If you disagree, you can lodge a complaint with the CNIL (cnil.fr), the French data protection authority.

Security

Encrypted connection (HTTPS); each account can only read its own gardens, projects and files (access rules enforced by the database); photos and images in private storage, shared through temporary one-hour links; service access keys kept on the server.

Minors

Jardifacile is intended for adults. A minor under 15 should not create an account without a parent’s consent.

Changes

This page evolves with the service (payment opening, new features). The update date is shown at the top.