Privacy Policy

1. Data controller

VORELIK (Patrick Tabountchikoff, sole trader), 61 rue de Lyon, 75012 Paris, France, publisher of Audit Express. Contact for any question about your data: support@vorelik.com.

We collect only what is needed to sell licences, make them work and answer support requests. We do not sell or rent any data, and we do not send advertising. This policy follows the EU General Data Protection Regulation (GDPR).

2. Purchase data

• Data: name, email address, billing address if requested, product purchased, amount, date. Card details are entered at Stripe and are never sent to us.
• Why: to perform the sale (legal basis: contract), keep the accounts (legal obligation), and handle refunds and payment disputes.

3. License data

• Data: the license key, the product, and an identifier of each activated computer (a 16-character fingerprint computed from the computer, which contains neither your name nor your files). At each check, our server also receives the connection IP address, like any web server.
• Why: to activate the license, limit its use to 2 computers and deactivate it in case of a refund or payment dispute (legal basis: contract).
• Where: the key and computer identifiers are stored with the payment, at Stripe. The license server (Cloudflare) does not keep anything itself.

4. BridgeToLeads free trial

When you request a trial on the Free trial page, we use:

• your email address, the business type and the city you chose, to send you the results (performance of your request) and then to tell you about BridgeToLeads; the optional campaign code (“ref”) shows where you came from;
• VORELIK news: only if you ticked the box (consent), which you can withdraw at any time with the “Unsubscribe” link in every email;
• your IP address and your email address in hashed form (irreversible fingerprint), only to prevent abuse: 1 trial per email address, 3 per IP address per day;
• Cloudflare Turnstile, an anti-robot check without advertising cookies, which analyses technical information from your browser.

The search is made on Google Maps (Google Places) with the business type and the city: your email address is not sent to Google. Results are not kept after the email is sent.

5. What stays on your computer

The websites you audit, the reports and your settings are stored only on your computer. They are not sent to us. Your API keys (for example Google PageSpeed) also stay on your computer, and requests go directly from your computer to the service concerned, under its own terms.

For this data, you are the data controller: you are responsible for using it in accordance with the data protection and direct marketing rules that apply to you.

6. Website and cookies

The pages of vorelik.com set no cookies and use no audience measurement or advertising tools. Fonts are hosted on our own site: displaying a page contacts no other service, except the Free trial page, which loads the Cloudflare Turnstile anti-robot check. The payment page, hosted by Stripe, uses its own cookies, needed for payment and fraud prevention. Details: cookie policy.

7. Service providers

Stripe

payment, receipts, license storage — Stripe Payments Europe, Ltd., Ireland (Stripe's policy)

Cloudflare

license server, software storage and downloads, free trial server and Turnstile anti-robot check — Cloudflare, Inc., United States

Brevo

free trial emails, news and contact list — Sendinblue SAS (Brevo), Paris, France

Google

Google Maps search for the free trial (business type and city only) — Google LLC, United States

GitHub

software builds — GitHub, Inc., United States

Host

hosting of vorelik.com — o2switch, Clermont-Ferrand, France

Some data may be processed in the United States. These transfers are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.

8. Retention periods

• Sales data and accounting records: 10 years (French Commercial Code, article L123-22).
• License key and computer identifiers: as long as the license exists; a released computer is removed from the list.
• Support emails: 3 years after the last exchange.
• Free trial: request awaiting confirmation of your address (email, business type, city), 24 hours at most; hashed IP address, 48 hours; hashed email address (one-trial limit), 12 months; contact in Brevo, 3 years after your last exchange with us, or until you unsubscribe (your address is then only kept on a suppression list, so that we never email you again).

9. Your rights

You can ask to access, correct, delete or port your data, restrict its processing or object to it, by writing to support@vorelik.com from the address used for the purchase. We reply within one month. Data the law requires us to keep (accounting) cannot be deleted before the end of its retention period.

If you believe your rights are not respected, you can complain to the French data protection authority (CNIL, www.cnil.fr/en) or to the authority of your country.