Privacy policy
Wyzik is in a closed beta. It is a test version used by a few invited artists: this policy applies to it, and will be completed before any commercial launch.
Who operates Wyzik
- Operator
- Flavien Brisset (société Nexareva en cours de création)
- Contact
- contact@wyzik.com
Who is responsible for what
For your account and your artist space, Wyzik is the data controller: it decides why and how that data is used.
For the personal data you add about other people — your contacts, the people travelling with you, the customers of your shop — you are the data controller, and Wyzik only stores and processes it on your behalf. You are responsible for having the right to hold it.
What we collect
Only what the service needs to run:
- Your account: email address, name, and password (stored only as a one-way hash, never readable).
- Your artist space: the name and profile of your project, your site, your dates and their logistics, your contacts, documents and shop — everything you choose to add.
- Sign-in sessions: the date, the IP address and the browser identifier are kept with each session, for security. They are deleted with the session or the account.
- Abuse protection: sign-in and sign-up attempts are counted per address and per network using a keyed hash, so the counter holds no readable address or IP. Counters are kept one day at most and purged as new attempts come in.
- Beta follow-up: we look at how far each space has got (profile confirmed, site published, first date, return visits). This is computed from the data above: no analytics tool and no advertising or tracking cookie is used, and nothing is collected for this purpose alone.
- When a visitor places an order in an artist's shop, the details they give (name, email, delivery address) are stored in that artist's space.
Why we use it, and on what basis
- To provide the service you asked for — account, space, site, dates, shop: performance of the service.
- To keep the service secure and prevent abuse: our legitimate interest.
- To understand how the beta is going and fix what blocks artists: our legitimate interest, using only the data above.
- To send the emails the service needs — verification, password reset, order confirmations. We send no marketing email.
Who receives your data
Wyzik does not sell your data. It is processed by the providers below, for the purpose given. Some of them may process data outside the European Union; where they do, it relies on the safeguards provided by the GDPR, such as the standard contractual clauses these providers publish.
| Provider | Purpose | When |
|---|---|---|
| Supabase | Database and accounts: your account, space and content are stored there. | Always |
| Vercel | Hosting of the application and of artist sites, and technical request logs. | Always |
| Cloudflare (R2) | Storage of the files you upload: documents, booking files, product pictures, downloads. | Always |
| Google Fonts | Typefaces of the pages: when a page loads them, your browser sends your IP address to Google. | Always |
| Resend | Delivery of transactional emails: verification, password reset, order confirmations. | When an email is sent |
| Stripe | Payments of the shop, and the payment account you connect. | Only if you connect the shop |
| Anthropic | Analysis of a document you ask Wyzik to read to pre-fill a date: its content is sent to the provider to produce the result. | Only if you use document analysis (Pro) |
Cookies and browser storage
Wyzik only uses what is strictly necessary for the service to work, so no consent banner is shown. There is no advertising, measurement or tracking cookie.
- Sign-in cookie: keeps you signed in.
- Language cookie: remembers the language you chose, for one year.
- Cart: on an artist's shop, the cart is kept in your browser's local storage until you check out or clear it.
How long we keep it
- As long as your space exists. You can delete it yourself at any time from “My space and data” in your dashboard: your account, space, files and custom domains are then erased immediately.
- Copies held in our hosting provider's backups disappear when those backups are rotated.
- If your space holds paid shop orders, you may have to keep them for your accounting: deletion is then paused, and you can ask us to handle it with you.
Your rights
You can ask for access to your data, its correction, its erasure or its portability, and you can object to its use or ask to limit it. We answer within one month.
- Erasure: do it yourself from “My space and data” in your dashboard.
- Access and portability: during the beta, write to us and we send you your data in a usable format.
- You can also lodge a complaint with your data protection authority — in France, the CNIL (cnil.fr).
Security
The data of different artists is isolated at the database level, passwords are stored as one-way hashes, the application connects to the database with restricted roles, and sign-in attempts are rate-limited. No system is perfectly secure: if a breach put your data at risk, we would tell you and the authority within the legal deadlines.
Changes
If this policy changes in a way that matters, we tell you in the app before it applies. The date above is the date of the last change.
Contact
For any request about your data: contact@wyzik.com.