Last updated: May 20, 2026
1. Data Controller
Thomas Albert Consulting SASU
SIREN 930 163 639 — SIRET 930 163 639 00014
97 avenue du XV de France, 34070 Montpellier
Contact: support@chefbase.io
2. Data Collected
| Data | Purpose | Legal Basis | Retention Period |
|---|---|---|---|
| Email, Name | Account creation, communication | Performance of the contract | Account duration + 3 years |
| Recipes, ingredients | Service operation | Performance of the contract | Account duration |
| Billing data | Payment management (Stripe) | Legal obligation | 10 years |
| AI usage logs | Credit billing, service improvement | Legitimate interest | 12 months |
| Browsing data | Audience analysis (Matomo) | Consent | 13 months |
3. Cookies and Trackers
ChefBase uses:
- Essential cookies: authentication (JWT), interface preferences. No consent required.
- Matomo Analytics: anonymized audience analysis, self-hosted. Subject to consent.
- Google Tag Manager: tag manager. Subject to consent. No advertising cookies.
You can withdraw your consent at any time via the “Cookie Management” button at the bottom of the page.
4. Data Sharing
Your data is never sold. It may be transmitted to:
- Stripe (Stripe Inc., USA) — payment processing, governed by EU Standard Contractual Clauses
- Anthropic (Anthropic PBC, USA) — AI processing of Copilot / OCR requests, anonymized data
- Brevo (Sendinblue SAS, France) — sending transactional emails
5. Hosting
Data is hosted in France on the servers of Monarobase (monarobase.net). Data is encrypted in transit (HTTPS/TLS) and at rest.
6. Your Rights (GDPR)
In accordance with the GDPR (EU Regulation 2016/679), you have the following rights:
- Access: obtain a copy of your data
- Correction: correct your inaccurate data
- Erasure (right to be forgotten): delete your account from “My Account → Danger Zone”
- Data Portability: export your data
- Objection: object to certain processing
To exercise these rights: support@chefbase.io
You also have the right to file a complaint with the CNIL.
7. Security
We implement appropriate technical and organizational measures: password encryption (bcrypt cost 12), limited-duration JWT tokens, restricted access to sensitive data, access logs.
8. Modifications
Any substantial modification to this policy will be notified by email with 30 days’ notice.
Thomas Albert Consulting SASU — 97 avenue du XV de France, 34070 Montpellier — support@chefbase.io