GDPR Compliance

BasiraLife is committed to complying with the General Data Protection Regulation (GDPR) of the European Union. This document describes how we protect your personal data and respect your rights as a European user.

The data controller is:

We process your data on the following legal bases:

• Contract execution: To provide our services (account management, data synchronization)
• Consent: For notifications and marketing communications
• Legitimate interest: To improve our services and ensure security
• Legal obligation: To comply with applicable laws

As an EU resident, you benefit from the following rights:

To exercise your GDPR rights:

1. Send an email to contact@basiralife.com contact@basiralife.com
2. Specify which right(s) you wish to exercise
3. Include proof of identity

We will respond within one month.

We retain your data for the following periods:

• Account data: Until account deletion + 30 days
• Usage data: Until account deletion
• Security logs: 12 months maximum
• Billing data: 10 years (legal obligation)

Your data is stored on servers located in the European Union (via Supabase). In case of transfers outside the EU, we ensure that appropriate safeguards are in place (standard contractual clauses, adequacy decisions).

If you believe that the processing of your data does not comply with the GDPR, you can file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) in France, or the data protection authority in your country of residence.