Privacy policy

Data controller

Verbobum is operated by sole trader Alexandre Désir (French business number SIRET 105 156 814 00011), the controller of the data described here.

What we collect

Your email address is required. We also store an internal ID, email-confirmation status, your preferences (language, topic, time, timezone, pause, audio and channels), your plan and, depending on your choices, a Telegram chat ID or Signal/WhatsApp number and its status. Temporary access tokens, the Stripe customer ID, and technical delivery and retry history are also retained. All other settings and channels are optional.

Why we use it

Your request and confirmation authorize the daily delivery you selected. Managing the account, preferences, delivery and any paid subscription is necessary to provide the requested service. Security, duplicate prevention and recovery after failures rely on our legitimate interest in providing a reliable service. Stripe may retain records required by its accounting, tax or fraud-prevention duties. We do not resell your data or use it for advertising.

Services that receive data

The production VPS hosts the application and database. Brevo receives your address, email content and delivery information. If you choose the relevant channel, Telegram receives the chat ID and messages, while Signal receives the number and messages through our self-hosted bridge. WhatsApp/Meta would receive those items only if that currently unavailable channel were enabled and selected. Stripe receives the data needed for payment and its customer portal; Verbobum never receives or stores your card number. Each service also applies its own terms, retention periods and possible international transfers.

Service policies:

• Brevo
• Stripe
• Telegram
• Signal
• WhatsApp / Meta

For how long

Preferences and delivery history remain linked to the account while it is active. Links expire after 15 minutes (Telegram linking), 24 hours (confirmation), or 90 days (management and unsubscribe), then are purged. Deletion immediately disables the account, requests deletion of the Stripe customer when present, and erases active-database rows within 30 days. Access-restricted daily technical backups are kept for 30 days, so those rows may remain there for up to 30 additional days, solely for disaster recovery, before automatic rotation. Providers may keep some data longer under their own legal duties.

Your rights

You may request access, correction, deletion, restriction, objection or portability where those rights apply. The link in every email already lets you correct preferences, withdraw from deliveries, pause, or delete the account. You may also write to us; we will verify that the request relates to your address.

File a complaint with the French data protection authority (CNIL)

Cookies and analytics

The Verbobum site sets no application cookie and includes no advertising, audience analytics or profiling script. HTTP connection data is handled transiently by the server to answer the request; no web access log is configured. No automated decision with legal or similarly significant effects is made about you.