Privacy policy
Last updated: October 9, 2026
This policy explains which personal data we process on https://plumevisuals.com, why, and how to exercise your rights (EU General Data Protection Regulation 2016/679, "GDPR", and the French Data Protection Act).
Data controller
Plume Studio (SIRET 131 096 893 00014) — contact@plumevisuals.com.
The Power BI visuals collect nothing
Our visuals run entirely inside your Power BI report. They send no data, neither to us nor to anyone. The license key is checked offline.
Data processed on the website
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email, name, profile picture provided by Google or Microsoft, sign-in method | Create and secure your account | Performance of contract | Until the account is deleted, or 3 years without sign-in |
| Company, language, preferences | Personalize the account, prefill the license | Performance of contract | Same |
| Licenses: organization, visuals covered, dates, key | Provide and manage licenses, send license end reminders (30 and 7 days before) | Performance of contract | Same |
| Billing data (address, VAT number, payment history) | Invoicing, accounting obligations | Legal obligation | 10 years (kept by Stripe and our accounting) |
| Custom visual request: name, email, organization, project description | Answer the request, prepare a quote | Pre-contractual steps taken at your request | 3 years after the last exchange |
| Feedback on a visual (bug or suggestion): email, name (optional), visual, version, message | Fix bugs, improve the visuals, reply to you | Legitimate interest (improving our products) | 3 years after the last exchange |
| News subscription | Sending news | Consent (can be withdrawn at any time) | Until you unsubscribe |
| Technical logs (IP address, date) | Security, fraud prevention | Legitimate interest | 90 days maximum |
We never see your card number: payment details are entered directly with Stripe.
Processors
| Provider | Role | Data location |
|---|---|---|
| Supabase | Database, authentication | European Union |
| Stripe | One-time payments (one-year licenses and renewals), invoices | EU and United States (standard contractual clauses, Data Privacy Framework) |
| Netlify | Website hosting | EU and United States (standard contractual clauses, Data Privacy Framework) |
| Google, Microsoft | Sign-in with your existing account (if you choose it) | According to their terms |
| Resend | License-related emails, custom visual requests and feedback on the visuals | EU and United States (standard contractual clauses) |
| Umami Cloud | Anonymous, cookie-free audience measurement | European Union and United States (GDPR compliant) |
Cookies
We only use strictly necessary cookies: those that keep you signed in (sb-…-auth-token). They are not used for tracking and do not require consent. Audience measurement (Umami) sets no cookie, does not store your IP address and collects no personal data; it respects your browser's Do Not Track setting.
Your rights
You can access, correct, delete or export (portability) your data, and restrict or object to its processing, at any time:
- from your account: edit your profile, "Download my data" button, "Delete my account" button;
- by email at contact@plumevisuals.com.
You can also lodge a complaint with the French data protection authority, CNIL (www.cnil.fr), or with your local authority.