Privacy Policy

Homeoceutics (Sole proprietorship (EI))
7, rue des roses, 85100 Les Sables-d'Olonne, France
Email: contact@homeoceutics.com
Phone: +33 6 76 81 02 58

• Account (email, display name, language, password hash, billing address): contract performance — Art. 6(1)(b) GDPR.
• Subscription & orders (plan status, Stripe identifiers, CGU version 2026-05, withdrawal consent timestamp): contract performance — Art. 6(1)(b).
• Transactional email (sending via our mail infrastructure to support@homeoceutics.com): contract performance — Art. 6(1)(b).
• Newsletters and product updates (email address, preferred language, subscription preferences, message and delivery status): your consent or, where the communication is otherwise permitted by law, our legitimate interest in informing users about Homeoceutics. You can withdraw your choice at any time from Dashboard → Notifications or through the category-specific unsubscribe link included in every message.
• Security & logs (IP, technical logs, CSRF/session cookies): legitimate interest in site security — Art. 6(1)(f).
• Personal catalog organisation (encrypted label wording, label assignments and private ratings): providing the requested account features — Art. 6(1)(b). Ratings are visible only to their author. A practitioner may choose to share a label assignment with all patients currently or subsequently linked to their active practitioner account.
• Practitioner advice and protocol sharing (immutable protocol snapshot, frozen content title, recipient identity, sharing method, status, personal message and expiry settings): providing the requested direct delivery, synchronization, history and revocation features — Art. 6(1)(b). Executable snapshots and recipient messages are encrypted at rest.
• Catalog search statistics (locale, result count, date only — search text is never stored): legitimate interest in aggregate service measurement — Art. 6(1)(f); see Section 8.
• Analytics cookies (Google Analytics 4, if you accept): consent — Art. 6(1)(a); see our Cookie Policy.
• Support chat (Crisp technical and session data, IP address, browser information, current page, messages and attachments you choose to send): responding to your support request and securing the service — Art. 6(1)(b) and (f). Only after the chat is opened, a signed-in user with a verified email address is identified to Crisp by that email address and, when provided, their display name. The Homeoceutics integration does not add any internal identifier, role, subscription, segment, health data or other business data to the information sent to Crisp.

• Stripe (payments) — stripe.com/privacy
• OVH (hosting) — 2 rue Kellermann, 59100 Roubaix, France
• Plunk (email delivery processor) for transactional messages, newsletters and product updates — useplunk.com/privacy
• Crisp IM SAS (support chat processor) — crisp.chat/en/privacy
• Your linked patients, only for catalog labels that you explicitly mark as shared while your practitioner access is active. Personal ratings are never shared.
• Recipients you select for direct patient advice or editable Pro protocol copies.

• Active account: for the duration of your registration.
• Inactive account: deletion or anonymisation after 3 years of inactivity following notice where possible.
• Technical logs: 1 year.
• Newsletter preferences and delivery history: preferences are kept for the lifetime of the account; message history and non-content delivery status are retained for operational traceability. Recipient addresses held by the delivery queue are cleared once a delivery reaches a terminal state.
• Personal labels and ratings: until you delete them or your account is deleted. Removing a shared practitioner relationship immediately hides the corresponding labels without disclosing ratings.
• Practitioner advice journal: for the lifetime of the practitioner account, including revoked, expired, replaced or recipient-deleted entries. The encrypted executable delivery is retained only while the advice remains active and is erased on revocation, replacement or loss of the practitioner-patient connection. The associated non-secret history remains until the practitioner account is deleted.
• Crisp support data: conversations, attachments and associated contact information are kept for no more than 12 months after the last exchange, then deleted through our operational review, unless a legal obligation or dispute requires longer retention.
• Billing & tax records: 3 years (legal obligation).

Catalog search terms and personal labels may reveal health-related information. We do not store the wording of searches in analytics or HTTP access logs. Personal label wording is encrypted at rest and its protected search tokens are not included in your export. Labels received from a practitioner are limited to active patient relationships and active practitioner access. Only anonymous aggregate search counts (locale, number of results, timestamp) are retained for internal statistics.

Support warning: Crisp is provided only for technical and account support. Do not send health information, patient information, symptoms, diagnoses, treatments, passwords, payment-card details or other sensitive data through the chat. The chat is not a medical or emergency service.