Privacy policy
Last updated: June 2026
1. Introduction
Coder Lab (hereinafter "we") attaches particular importance to the protection of your personal data. This privacy policy describes how we collect, use and protect your data when you use the Weplesi application and the https://www.weplesi.com website.
It applies to all Weplesi users: residents, residents' council members and managing agents.
2. Data controller
Coder Lab
SARL (limited liability company), SIRET 834 595 498 00025
1 Chemin de Saint-Cloud, 92130 Issy-les-Moulineaux, France
Email: nsantos@coderlab.fr
3. Data collected
3.1 Data provided at registration
- Email address
- Last name and first name
- Phone number (optional)
3.2 Data related to the use of the service
- Residence, building and floor identifiers
- Reported issues (category, description, attached photos)
- Comments and exchanges in the residence's feed
- Role in the residence (resident, residents' council member, managing agent)
3.3 Data collected automatically
- Technical connection data (IP address, device type, OS version)
- Error and performance logs (collected by our monitoring tools)
- Browsing data and feature usage (pages visited, actions taken in the application), collected through an anonymous identifier and without cookies
We do not process data relating to minors in our database. Weplesi is intended for adults.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Performance of the contract (Terms) |
| Reporting and tracking issues | Performance of the contract |
| Posting announcements and communicating within the residence | Performance of the contract |
| Managing access and roles | Performance of the contract |
| Security, fraud prevention | Legitimate interest |
| Improving the service (monitoring, errors) | Legitimate interest |
| Analysing user behaviour to improve the product (PostHog) | Legitimate interest |
| Aggregated usage statistics | Legitimate interest |
5. Recipients of the data
Your data is accessible:
- To the other residents of your residence: your name and the issues you post in the shared feed are visible to the residents of your residence.
- To your residence's residents' council members: they have access to reported issues and access requests.
- To our technical processors (see section 6).
We do not sell or rent your data to third parties.
6. Processors and transfers outside the EU
| Provider | Role | Location | Safeguards |
|---|---|---|---|
| Supabase | Database, authentication | Europe (eu-west) | EU standard contractual clauses |
| Vercel | Website hosting | Europe | EU standard contractual clauses |
| Sentry | Technical error monitoring | United States | EU standard contractual clauses |
| PostHog | User behaviour analysis (product analytics, without cookies) | Europe (EU Cloud, Frankfurt) | EU standard contractual clauses |
The error logs collected by Sentry may contain internal user identifiers and technical browsing data. This data is used exclusively to fix malfunctions in the application.
7. Retention period
| Type of data | Retention period |
|---|---|
| Active account data | Duration of the subscription / pilot |
| Data after account deletion | 30 days (then permanent deletion) |
| Error logs (Sentry) | 90 days |
| Analytics data (PostHog) | 90 days |
| Technical connection data | 12 months |
8. Your rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate data
- Right to erasure: ask for your data to be deleted
- Right to data portability: receive your data in a structured format
- Right to object: object to processing based on legitimate interest
- Right to restriction: temporarily suspend the processing of your data
To exercise these rights, contact us at: nsantos@coderlab.fr
We will reply within 30 days at most. If you believe your rights are not being respected, you can lodge a complaint with the CNIL (the French data protection authority): https://www.cnil.fr
9. Security
We implement appropriate technical and organisational measures to protect your data:
- Encrypted communications (HTTPS/TLS)
- Secure authentication (JWT tokens, encrypted sessions)
- Role-based access control (Row Level Security in the database)
- Access to production data restricted to authorised people
10. Cookies and trackers
The weplesi.com website uses technical cookies that are strictly necessary for the service to work (session, authentication). No advertising or third-party tracking cookie is set.
The PostHog analytics tool is configured in cookieless mode (in-memory persistence only). Analytics data is not kept between sessions and no explicit consent is required for it.
11. Changes
We may update this privacy policy. In the event of a substantial change, you will be informed by a notification in the application or by email. The date of the last update appears at the top of this document.