Privacy Policy

Last updated: May 2026

1. Data controller

PowerIX — Sole proprietorship
SIRET: 98009784400016
Address: Condécourt (95450), France
DPO email: contact@powerix.fr

2. Data collected

Account data

Data	Purpose	Legal basis
Email	Authentication, communication	Contract
First / last name	Identification	Contract
Password (bcrypt hashed)	Authentication	Contract

Technical data (agent)

Data	Purpose	Legal basis
CPU, RAM, disk metrics	Health diagnosis	Contract
Windows services status	Anomaly detection	Contract
Network configuration	Connectivity diagnosis	Contract
Hardware info (disk model, battery)	Hardware diagnosis	Contract
Machine hostname	PC identification	Contract

Data NOT collected

❌ Personal files (documents, photos, videos)
❌ Passwords stored on the PC
❌ Browsing history
❌ Emails or messages
❌ Keystrokes
❌ Screenshots
❌ Geolocation data

3. Processors and transfers

Processor	Role	Location	Data transferred
OpenAI	AI analysis of diagnostics	USA	Anonymized technical metrics only (CPU %, RAM %, failed services). No personal data.
Google	Audience measurement and ad attribution (Google Analytics, Google Ads)	USA / UE	Browsing data and advertising identifiers (e.g. page views, campaigns, conversions)
Umami	Audience measurement (Umami)	UE	Page-view statistics (no display advertising)

Transfers to OpenAI (USA) are covered by the European Commission's Standard Contractual Clauses (SCCs). Sent data contains no information that could identify a natural person. Google and Umami are used for audience measurement and campaign attribution.

4. Retention period

Data type	Duration
Account data	Subscription duration + 30 days
Diagnostic results	Rolling 12 months
Application logs	90 days
AI analyses (cache)	12 months

Beyond these periods, data is deleted automatically.

5. Your rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

Right of access: obtain a copy of all your data
Right to rectification: correct inaccurate data
Right to erasure: delete your account and all associated data
Right to portability: export your data in a readable format
Right to object: object to processing of your data
Right to restriction: restrict processing

To exercise these rights: contact@powerix.fr
Response time: 30 days maximum.

6. Security

Data encrypted at rest (AES-256)
Encryption in transit (TLS 1.3)
Passwords hashed (bcrypt)
Secrets encrypted in the database (AES-GCM)
Agent connection via secure WebSocket (WSS)
Rate limiting on sensitive endpoints
Hosting in France on dedicated infrastructure

7. Cookies

The Service uses a session cookie (httpOnly, secure) for authentication. Audience-measurement and ad-attribution tools are also used: Umami (page statistics), Google Analytics and Google Ads (campaign and conversion measurement). A first-touch cookie or local storage may keep acquisition parameters (e.g. gclid, UTM) to attribute a sign-up to a campaign. The site does not serve third-party display ads.

8. Data minimization

Under the data minimization principle (GDPR art. 5), we collect only data strictly necessary for the Service. The agent is designed to read system metrics only and ignore any personal content.

9. Complaint

If you believe your rights are not respected, you may lodge a complaint with the CNIL:
www.cnil.fr/fr/plaintes

10. Contact

PowerIX — Data controller
Email: contact@powerix.fr
Website: https://powerix.fr