Privacy and personal data

UNCLMD follows data minimisation: data is collected only when needed for a requested report, the private workspace, security or operation of the service.

Controller

Lionel Rhinan, operating UNCLMD as Blueprint IO Systems. Contact: contact@unclmd.com.

Data processed

Depending on use, we process the account email, submitted projects and names, supplied context, source results, normalized evidence, reports, Watch events, sharing choices and redacted technical logs. Anonymous Quick scans are not stored as user projects.

Purposes and legal bases

Data is used to perform requested checks and private features, secure the service, prevent abuse, preserve evidence traceability and provide support. Performance of the service, legitimate security interests and consent where requested are used as appropriate to each purpose.

Sources queried

A submitted name may be sent to sources explicitly shown in the product, including RDAP, DNS, npm, PyPI, GitHub, configured French registers and INPI. An unavailable source remains unknown. Social networks that are not integrated are not queried automatically.

Recipients and processors

Access is limited to the relevant user, authorised private reviewers and providers required for hosting, authentication and database operation. Netlify hosts the application and Supabase provides authentication and persistence. Stripe receives data only if payment is later opened and initiated.

United States visitors

UNCLMD is operated from France. We do not sell personal information, use it for cross-context behavioral advertising, or install optional advertising or analytics trackers by default. Rights vary by state and circumstance; requests from any jurisdiction can be sent to the contact above and proportionate identity verification may be required. This describes our practices and does not claim that every privacy statute applies to UNCLMD.

International transfers

Some providers may process data outside the European Economic Area. The relevant provider’s applicable contractual safeguards then govern the transfer. The exact scope must be reviewed before commercial launch.

Retention

Schedule france-retention-2026-08-21.v1 assigns a period to each purpose. Raw source attempts are kept for 3 months and pseudonymised usage events for 13 months. Accounts, projects, observations and reports remain active during the relationship, then for no more than 3 years after the last activity. Watch history is kept during the subscription and for 3 months after closure. Support requests are kept for 3 years after closure and security logs for 12 months. Contract and consent evidence is archived for 5 years. Invoices and accounting records are archived for 10 years. Prospect data without a purchase is deleted or anonymised 3 years after the last contact. A legal duty, dispute or preservation request may suspend deletion only for the affected data. Commercial opening remains blocked until deletion, anonymisation and audit jobs for this schedule are approved.

Cookies

Only cookies strictly required for authentication, security and language preference are used. No advertising cookie or optional third-party analytics script is installed by default.

Automated decisions

UNCLMD verdicts are decision support. They do not produce automatic legal effects and do not replace review by a qualified professional.

Children

UNCLMD is directed to founders, creators and professional teams, not children under 13. If you believe a child submitted personal data to us, contact us to request deletion.

Your rights

You may request access, correction, erasure, restriction, portability or object where applicable. Contact contact@unclmd.com. You may also complain to the competent data protection authority.