Privacy Policy

Data controller

Studento, publisher of the studento.fr site, is the controller for the personal data described here. For any question, write to contact@studento.fr.

What data we collect

Depending on the services you use:

Account: first name, last name, email, phone, password (never stored in plain text).
Certificate (ADL) or housing help request: date and city of birth, nationality, country of residence, passport number, stay dates and duration, school of admission, housing address.
Free diagnostic and contact form: the information you enter yourself about your study project.
Payment: Studento never stores your card number or your Mobile Money credentials — this data is entered and processed directly by our payment providers (see below).

Your passport number and information related to your certificate request are sensitive data: they are used only to put together your file and are never used for any other purpose.

Why we use it

Create and manage your account, your file, and your documents;
Process your certificate, housing help, or guidance request;
Contact you (email, WhatsApp) about your request;
Process your payments and prevent fraud;
Meet our legal and accounting obligations.

Legal basis

Processing is based on the performance of the contract between us (providing the requested service), your consent (contact and diagnostic forms), and, occasionally, our legitimate interest (security, fraud prevention) or a legal obligation (accounting).

Who has access to your data

Studento never sells or rents your data to anyone. It is shared only with the providers necessary for the service to work:

Supabase — hosting of the database, accounts, and documents.
Resend — sending automated emails (request confirmation, document available...).
Stripe — card payment. Studento never sees or stores your card number: Stripe processes it directly, under its own security standards (PCI-DSS Level 1 certification). See Stripe's privacy policy.
CinetPay — Mobile Money payment (Orange Money, MTN Mobile Money...).
Google Analytics — audience measurement to understand site usage and improve it, only if you've given your consent in the cookie banner. See our cookie policy and Google's privacy policy.
Meta (WhatsApp) — when you contact us via WhatsApp, that exchange is subject to WhatsApp's privacy policy.

Some of these providers may process data outside the European Union; where applicable, they commit to safeguards recognized under GDPR (standard contractual clauses or equivalent).

How long we keep it

Your data is kept for as long as necessary to process your request, then archived for the legally applicable retention period (accounting and tax obligations), before deletion or anonymization.

Security

Access to your file and documents requires an authenticated account. Passwords are hashed, never stored in plain text. Exchanges with the site are encrypted (HTTPS). Access to the team workspace is protected by two-factor authentication.

Your rights

In accordance with GDPR, you have the right to access, correct, erase, restrict, and object to the processing of your data, as well as the right to data portability. To exercise these rights, write to contact@studento.fr. You can also file a complaint with the CNIL (cnil.fr), the French data protection authority.