Privacy Policy

The data controller is balzac, reachable at hello@get-balzac.com.

The application is operated from France and intended for professional use.

balzac collects data necessary to operate the service: login email, ideas, posts, themes, display preferences and anonymized usage data.

If you connect your LinkedIn account, balzac receives and stores access tokens and profile information strictly necessary for publishing in an encrypted form (based on the scopes you accepted). LinkedIn connection is entirely optional.

Data is used to provide the service (capture, writing, planning, analysis), improve the experience, generate content suggestions and, only if you explicitly authorized it, publish on LinkedIn.

balzac does not use your ideas to train AI models for external purposes, and never sells your data.

Processing relies on the performance of the service contract (providing the application), the legitimate interest of improving and securing the service, and, for LinkedIn connection, your explicit consent given through LinkedIn's OAuth screen.

balzac relies on selected subprocessors for hosting, analytics and publishing: Lovable Cloud (database hosting and authentication), LinkedIn (post publishing via OAuth), balzac's self-hosted analytics (anonymized data), and a secure AI gateway for content generation.

LinkedIn tokens are encrypted and stored in isolation. They are never exposed on the client side.

Content data (ideas, posts, analyses) is kept as long as your account is active and you do not delete it. Account data and LinkedIn tokens are deleted when you delete your account. Analytics data is retained for up to 12 months.

You have the right to access, rectify, erase, restrict and port your data. To exercise these rights, contact us at hello@get-balzac.com. You can also delete your account and data from the Profile page in the app.

balzac does not use advertising cookies or third-party trackers. Only strictly necessary authentication cookies and language preference cookies are used. Navigation statistics are measured with balzac's self-hosted analytics, which does not collect identifiable personal data.

Access to the application is protected by authentication. Data is stored in a secure database with Row Level Security (RLS), and sensitive tokens are encrypted with AES-GCM. No system is infallible; balzac applies current best practices to limit risks.

This policy may be updated as the service or regulations evolve. The last updated date is shown at the bottom of the page. We encourage you to review this page regularly.