Privacy
What data we process, on what basis, and for how long.
| Data | Legal basis | Retention |
|---|---|---|
| Session recording | Explicit oral consent, captured in the recording | 24 months, then automatic deletion |
| Report photos | Performance of the contract | Lifetime of the report |
| Identity document | Verification of the owner's identity | Never stored, visual check only |
| Geolocation | Consent | Approximate only (city), never the address |
| Session log | Legitimate interest (evidence in case of dispute) | 5 years |
Hosting
The data in the table above is stored exclusively in the European Union (Supabase, EU region); no analytics tool sends it outside the EU. The application itself is hosted by Vercel Inc. (USA), which processes data in transit under the EU-US Data Privacy Framework: the only transfer outside the EU involved.
Your rights
You can request an export of your data in JSON format and the deletion of your account, with a cascading purge of associated data.
To exercise these rights, write via the contact form or to contact@dorynn.com. Dorynn is not required to appoint a data protection officer under article 37 of the GDPR: requests are handled directly by the publisher.