1. Data controller
Lucas Santoni, sole proprietor (SIREN 849 004 817), publishes Litdeck and is the controller for the processing described here (see the legal notice). Contact: support@litdeck.app.
2. Data we process
- Account: the email address, name, and identifier provided at sign-up (by email or via Google), managed by our authentication provider Clerk.
- Books: the EPUB or PDF files you upload, and the data derived from them (chapters, vocabulary inventory, example sentences).
- Decks: the generated decks and their settings (chapters, CEFR level, translation language).
- Payment: payments are handled by Stripe; we never store your card numbers, only the billing history.
- Usage: usage statistics collected without cookies via PostHog (page views, in-app actions), and technical logs.
- Support: the emails you send to support@litdeck.app.
3. Purposes and legal bases
- Providing the Service (account, analysis, generation, download): performance of the contract.
- Billing and accounting: legal obligation.
- Audience measurement, security, abuse prevention: legitimate interest.
- Answering your support requests: performance of the contract.
4. Sub-processors
We share your data with the following providers, only to the extent necessary for their role:
- Vercel Inc. (United States): application hosting and file storage.
- Neon Inc. (United States): database hosting (AWS us-east-1 region).
- Render Services, Inc. (United States, Ohio region): book analysis and deck generation.
- Clerk Inc. (United States): authentication and account management.
- Stripe (Ireland / United States): payments.
- PostHog Inc. (hosted in the European Union, Germany): usage statistics.
- Resend (United States): sending and receiving email.
- DeepSeek (China): generation of definitions and translations; see the dedicated paragraph below.
- Anthropic (United States): language models used for some generation steps.
- Mistral AI (France): text recognition (OCR) for scanned PDFs.
Processing by DeepSeek (China). To produce the definitions, translations, and example sentences of your decks, excerpts of the text of the books you upload (words and sentences) are sent to DeepSeek, a language-model provider based in China, and processed there. These excerpts are never accompanied by data that could identify you: no name, no email, no account identifier. If you do not want a text to be processed this way, do not upload it.
5. International transfers
Our main providers are based in the United States: your account data, books, and decks are hosted and processed there. These transfers rely on the mechanisms provided by the GDPR (the EU-US Data Privacy Framework adequacy decision or standard contractual clauses, depending on the provider).
Book excerpts sent to DeepSeek are processed in China, which has no adequacy decision. The main safeguard is minimization: only excerpts of the book text are transmitted, with no identifying data.
6. Retention
- Account data: for as long as the account exists.
- Books and decks: until you delete them, or until your account is deleted.
- Billing records: ten years (legal obligation).
- Technical logs and statistics: a short, proportionate period.
7. Your rights
You have the rights of access, rectification, erasure, portability, restriction, and objection over your data. You can delete your books and decks directly in the application. To exercise a right or request full deletion of your account, write to support@litdeck.app. You can also lodge a complaint with the French supervisory authority, the CNIL (cnil.fr).
8. Cookies
Litdeck only uses strictly necessary cookies: the authentication session (Clerk) and display preferences (theme, language). Audience measurement works without cookies, and there are no advertising cookies; no consent banner is therefore required.
9. Changes
This policy may evolve with the Service. The update date appears at the top of the page; any substantial change will be announced in the application or by email.