Data Protection & Privacy
Privacy Policy
Compliant with European data protection regulations
Oisif Data Commitment in Brief
Oisif respects your privacy: zero advertising trackers, zero invasive profiling, strictly functional technical cookies only, and data processed exclusively to curate recipes tailored to your ingredients.
1. Data Controller
The personal data collected on the Oisif web application is processed under the responsibility of:
Data Controller: Mathis Hennebique, individual non-professional publisher
Postal Address: Confidential in accordance with the law, personal details being held by the hosting providers.
Contact Email: contact@oisif.fr
2. Personal Data Collected & Legal Bases
In compliance with the principle of data minimization, Oisif collects only data strictly necessary for the following purposes:
Account Creation & Authentication
Data categories: Email address, securely encrypted password, user identifier, creation timestamp.
Purpose: Creation and management of your user account, secure authentication, synchronization of saved recipes across devices.
Legal basis: Contract performance — necessary to deliver the requested authenticated service.
Culinary Prompts & Recipe Generation
Data categories: User culinary inputs including ingredients list, preparation time, equipment, dietary choices.
Purpose: Transmission to the generative artificial intelligence model to compute tailored recipe proposals.
Legal basis: Execution of the requested service. No personal identity data is ever included in culinary prompts sent to the model.
Security, Traffic Regulation & Transactional Emails
Data categories: IP address processed temporarily for traffic regulation, request timestamps, transactional email logs for password recovery.
Purpose: Preventing automated abuse, mitigating traffic spikes, and delivering essential service communications.
Legal basis: Legitimate interest for security, and service execution for account notifications.
3. Data Retention Periods
Oisif enforces clear retention limits in accordance with regulatory recommendations:
- Active User Account: Retained throughout the active life of your account. In the event of account deletion, all personal data and saved recipes are purged within 30 days.
- Inactive User Accounts: Accounts inactive for more than 36 consecutive months are deleted after prior notification.
- Culinary Prompts: Processed ephemerally in memory to compute recipes. Unauthenticated generations are never kept in long-term databases.
- Security & Traffic Regulation: Temporary security counters expire automatically within 24 hours.
4. Technical Service Providers
Oisif relies on specialized cloud service providers to ensure the reliability and speed of the service:
Supabase Inc. — Hébergement des données et authentification
Data hosted within the European Union, governed by European contractual standards.
Vercel Inc. — Hébergement applicatif et réseau de diffusion
Global edge cloud network with certified data protection agreements.
Google Ireland Ltd. / Google AI — Modèle d'intelligence artificielle
Execution of recipe generation prompts. Data transmitted contains culinary ingredients only. Enterprise terms guarantee that prompt data is not used to train generative models.
Brevo — Envoi des courriels transactionnels
European company ensuring secure delivery of account confirmation and recovery messages.
Upstash Inc. — Régulation du trafic applicatif
Temporary memory cache used solely for automated abuse prevention with rolling 24-hour expiration.
5. Cookies & Tracking Policy
In strict adherence to French and European regulations, Oisif applies a transparent cookie policy:
Absence of advertising and commercial cookies: Oisif embeds no advertising trackers, no marketing cookies, and no invasive profiling tools.
Strictly necessary technical cookies only:
- Authentication cookie: Maintains your secure connected session.
- Language preference cookie: Memorizes your preferred interface language.
- Display preference cookie: Saves your menu layout preference.
Consent exemption: Because these cookies are exclusively intended to enable electronic communication and provide a service explicitly requested by the user, they are legally exempt from prior consent. No intrusive banner is required, preserving an uncluttered culinary experience.
6. Your Rights
In accordance with European data protection regulations, you hold the following rights regarding your personal information:
- Right of access: You may request confirmation as to whether personal data concerning you is processed and obtain a copy thereof.
- Right to rectification: You may request modification of inaccurate or incomplete personal data at any time.
- Right to erasure: You may demand the permanent deletion of your user account and associated personal information.
- Right to restriction of processing: You may ask to freeze processing temporarily during the verification of a request.
- Right to data portability: You can receive your saved recipes and profile data in an open, structured format.
- Right to object: You may object on legitimate grounds to processing based on legitimate interest.
How to Exercise Your Rights:
To exercise any of these rights, simply email our contact address at: contact@oisif.fr.
We commit to answering your inquiry within 30 days. If you consider our response unsatisfactory, you have the right to lodge a complaint with the French supervisory authority, the CNIL, at www.cnil.fr.
7. Security Measures
Oisif applies recognized technical and organizational measures to protect personal data from loss, alteration, or unauthorized access:
- Systematic encryption across all network communications via HTTPS.
- Robust cryptographic hashing of passwords without plaintext storage.
- Strict database isolation ensuring each user can access only their own saved recipes.
- Automated traffic regulation to prevent brute force attacks.
8. Policy Updates
This Privacy Policy may be updated to reflect legislative evolutions or additions to Oisif's features. Significant amendments will be communicated directly on the platform.
Document valid as of October 2026.