Privacy policy

The chiptunefile.com website and the ChiptuneFile customer area are published by Benjamin Fargeot, sole trader (entrepreneur individuel, EI), SIRET 940 859 457 00019, 2 rue du Général Louis Clouet, 33650 La Brède, France, who is the controller of the processing described here.

Contact for any question about your data: contact@chiptunefile.com.

ChiptuneFile is a service for professionals only. The data processed mainly concerns the managers and employees of customer businesses, as well as information about their own customers' vehicles.

• Account: first name, last name, email address, phone number, login details, language, notification preferences.
• Business: company name, SIRET number, EU VAT number, address, when you provide them.
• Vehicles and files: files read from engine control units (ECU) and modified files, make, model, engine, year, ECU references, registration number or vehicle identification number (VIN) when entered in the order. An ECU file may also contain the vehicle's VIN.
• Orders and credits: order history, options chosen, credit purchases, invoices.
• Payment: processed by Stripe. We receive the payment confirmation and references, never your full card number.
• Support: tickets, messages exchanged with our engineers, attachments.
• Notifications: emails sent, preferences, push notification subscription if you enable it.
• Referral: link between the referring account and the referred account, rewards granted.
• Technical data: IP address, browser type, login dates and service event log.

Your data is accessible to the members of the ChiptuneFile team who need it to process your orders and support requests, and to the service providers below, who act on our instructions. We do not sell your data.

Some providers (Stripe, Discord, push notification services) may process data in the United States. These transfers are based on the EU-US Data Privacy Framework where the provider is certified, or otherwise on the European Commission's standard contractual clauses.

• Account and related data: for as long as the account exists. You can ask for its deletion at any time by email; we process the request within one month.
• ECU files and vehicle information: while the account is active, so that you can download them again and so that correction requests can be handled. You can ask for their deletion at any time.
• Support tickets: while the account is active.
• Invoices and accounting records: 10 years (legal obligation).
• News and offers emails: until you object or the account is deleted.
• Technical log: 12 months at most.

When the account is deleted, the data is erased, except for data we are legally required to keep (invoices).

We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS). In the event of a data breach likely to present a risk to you, we will inform you as required by the GDPR.

The website only uses cookies that are necessary for it to work: customer area session and authentication, language preference. They do not require your consent.

We measure traffic with Umami, a self-hosted tool, without cookies and without storing your IP address. These statistics are anonymous and are only used to improve the website.

You have the right to access, rectify, erase, restrict, object to and port your data, and to set instructions regarding your data after your death.

To exercise these rights, write to contact@chiptunefile.com: we reply within one month.

You can also lodge a complaint with the data protection authority of your country:

• CNIL (France): cnil.fr
• Data Protection Authority (Belgium): dataprotectionauthority.be
• FDPIC (Switzerland): edoeb.admin.ch
• For other countries, the list of European authorities is available on the EDPB website.

We may update this policy. The date of the last update is shown at the top of the page; in the event of a significant change, we will inform you by email.