Legal

Privacy policy

Data controller

Aubia SASU

Registered office: 13 Ter-15 rue Auguste Gervais, 92130 Issy-les-Moulineaux, France
Data protection contact: dpo@aubia.dev

Data collected via the waitlist

Data collected via the waitlist
Data	Purpose	Required
Email address	Waitlist registration, beta invitation and allowing an Aubia account to be created with this address	Required
Language	Sending communications in the chosen language	Required
Acquisition source	Measurement of acquisition channels	Automatic
UTM parameters	Measurement of acquisition channels	Optional
Connection country, derived from your IP address by Cloudflare	Statistics by country and by month with no identifier	Automatic
Dates of registration, of the confirmation link being sent and of confirmation	Tracking of the double confirmation, deletion of unconfirmed registrations	Automatic

Without an email address, you cannot register on the waitlist.

The acquisition source, the UTM parameters and the connection country are also used for the viewing of registrations by Aubia.

Your IP address is never stored with the registration. The hosting provider's technical logs may nonetheless contain it. Those of Laravel Nightwatch redact it.

Data collected via audience measurement

Aubia measures site audience with Fathom Analytics. Fathom receives the data of each visit on its servers located in the European Union and anonymizes it before any transfer outside the Union.

Data collected via audience measurement
Data	Purpose	Personally identifiable
URL visited	Traffic measurement	No
Visitor's country	Geographic statistics	No
Browser, operating system, device type	Technical statistics	No
Visit source	Acquisition channel measurement	No
Waitlist events: display of the form and the counter, outcome of the submission, confirmation of the registration	Measurement of waitlist registrations	No

Fathom sets no cookies and retains no IP address or personal identifier.

Legal basis

Your consent is the basis for your waitlist registration and for the use of the data recorded with it, other than statistics. You give it by submitting the registration form, whose notice refers to this policy, and then by confirming your registration through the link received by email (double opt-in).

You may withdraw your consent at any time by sending a request to dpo@aubia.dev.

Aubia's legitimate interest is the basis for:

the hashes of your IP address and your email address, to protect registration, confirmation and unsubscription against abuse
the hosting provider's technical logs and monitoring by Laravel Nightwatch, to diagnose errors and slowdowns on the site
the statistic by country and by month of confirmed registrations, to know the geographic distribution of demand
the statistic by acquisition source and campaign of created accounts, to measure acquisition channels
audience measurement by Fathom Analytics, to know how much traffic the site receives
the processing of your requests by Cloudflare, to secure and deliver the site
the processing of your emails to contact@aubia.dev or dpo@aubia.dev, other than requests to exercise your rights, in order to reply to you

The legal obligation to respond to requests to exercise your rights (Articles 12 to 22 of the GDPR) is the basis for processing them.

Retention period

Retention period
Status	Duration
Confirmed email	Until you unsubscribe, or until an Aubia account is created with this address, which erases the registration. The account creation remains counted, with no identifier and with no fixed term, in a statistic by acquisition source and campaign
Unconfirmed email	30 days, then deletion
Unsubscribed email	Immediate erasure: address replaced by a synthetic value, connection country, UTM parameters and tokens deleted. The registration retains only the language, the dates, the replacement address and a generic origin in place of the acquisition source. A confirmed registration remains counted, with no identifier, in a statistic by country and by month
Statistic by country and by monthwith no identifier	No fixed term
Hashes of the IP address and the email address at registration, of the IP address at confirmation and at unsubscription	1 minute
Hosting provider's technical logs	7 days at most
Laravel Nightwatch monitoring data	90 days
Data from your requests processed by Cloudflare (IP address, headers, security events)	For as long as the processing is necessary for the service, and at most until the end of the contract with Aubia
Fathom audience measurement data	Retained aggregated and anonymized for the duration of the Fathom account activity
Emails received at contact@aubia.dev and dpo@aubia.dev	3 years after the last exchange

Recipients of your data

Your data is accessible to:

Laravel Holdings, Inc. (hosting provider, US legal entity, data stored in the European Union)
Laravel Nightwatch (Laravel, technical monitoring of errors and slowdowns, data stored in Germany, IP address, cookies and tokens redacted)
Brevo (Sendinblue SAS) (transactional emails, France)
Cloudflare, Inc. (CDN and reverse proxy, United States)
Google Ireland Limited (Workspace, Ireland)
Conva Ventures Inc. (Fathom Analytics, Canada, visits received in the EU)

Transfers outside the European Union

The transfer of your data to the United States by Cloudflare, Inc. (CDN and reverse proxy) is covered by the European Commission's adequacy decision on the EU-US Data Privacy Framework, under which Cloudflare is certified. You can verify this certification on the Data Privacy Framework list (new tab).

Your rights

Access: view your data
Rectification: correct your data
Erasure: request the deletion of your data
Restriction: restrict processing
Portability: receive your data in a structured format
Withdrawal of consent: at any time
Post-mortem directives: regarding the fate of your data after your death

Objection: you may object at any time, on grounds relating to your particular situation, to processing based on Aubia's legitimate interest.

To exercise your rights: dpo@aubia.dev. Response time: 1 month maximum.

Complaint to the CNIL

You may lodge a complaint with the CNIL (new tab).

Cookies

The aubia.dev site only sets cookies necessary for its operation, exempt from consent (session, form protection, language preference and Cloudflare network security), and stores your theme preference in your browser's local storage.

Last updated: October 2026