Privacy Policy

Last updated: April 2026  ·  This policy applies to Media Paddle at app.sciencesplained.com

1. Data controller

The data controller for Media Paddle is:

Adam McNamara
Trading as ScienceSplained
57 Impasse de la Chimère, 30900 Nîmes, France
SIRET: 844 815 704 000 29
Email: hello@sciencesplained.com

2. What data we collect

Data	Why we collect it
Name, email address	Account creation, authentication, and communications
Organisation name	To scope your account and team
Documents you upload	To process through AI tools on your behalf
Project content (descriptions, personas, brand settings)	To provide the platform's core functionality
Usage logs	Security, debugging, and service improvement
Payment information	Processed by Paddle — we do not store card details

3. Legal basis for processing

• Contract performance — processing necessary to provide the service you signed up for
• Legitimate interests — security monitoring, fraud prevention, service improvement
• Legal obligation — where required by applicable law

4. Important: patient data

Media Paddle is designed for creating trial communications materials. You must not upload documents containing identifiable patient or participant personal data. If you do so, you do so in breach of our Terms of Service and as data controller for that data.

5. How we use your data

• To provide, maintain, and improve the platform
• To send transactional emails (account verification, password reset, invitations)
• To process payments via our payment processor Paddle
• To detect and prevent security threats (including malware scanning of uploaded files)

6. Third-party processors

Processor	Purpose	Location
Render.com	Platform hosting and compute	USA (EU region where available)
Backblaze B2	File storage	EU (Frankfurt)
OpenAI	AI content generation	USA
Scaleway	Transactional email delivery	France
VirusTotal (Google)	File hash malware scanning — file hashes only, never file contents	Spain / USA
Paddle	Payment processing and tax compliance	UK / USA

Where data is transferred outside the EEA, we rely on appropriate safeguards including Standard Contractual Clauses.

7. Retention

• Account data: retained while your account is active and for 90 days after deletion
• Uploaded files: deleted within 30 days of you removing them, subject to our purge schedule
• Usage logs: retained for 90 days
• Payment records: retained for 7 years for tax compliance

8. Your rights

Under the GDPR and applicable French data protection law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability
• Lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés)

To exercise any of these rights, contact us at hello@sciencesplained.com.

9. Cookies

We use only essential session-based authentication. We do not use tracking or advertising cookies.

10. Changes to this policy

We may update this policy from time to time. We will notify you by email of material changes. The current version is always available at this URL.

11. Contact

For any privacy-related queries: hello@sciencesplained.com