Privacy policy and terms

Publisher#

The stanzafix.com website and the client portal (together, the “Online Services”) are published by:

Name

Stanza

Legal form

[to be completed]

SIRET (company registration)

[to be completed]

Address

[to be completed]

Publication director

[to be completed]

Contact

contact@stanzafix.com

VAT

VAT not applicable, article 293 B of the French General Tax Code (CGI)

Hosting#

Client portal

Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA — vercel.com. Runs in the Paris region.

stanzafix.com website

Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA — cloudflare.com.

Database and files

Supabase, Inc. — supabase.com. Data hosted in a data centre located in the European Union.

Intellectual property and reporting#

The Stanza brand, its logo, texts, visuals, design and the code of the Online Services are protected by intellectual property law. Any reproduction or reuse without prior written permission is prohibited, except as allowed by law (short quotation, private copy).

Third-party trademarks mentioned (Google, Meta, Stripe, Axeptio, Cookiebot, Didomi, Make, Zapier…) belong to their owners and are used for descriptive purposes only, with no partnership implied unless stated otherwise.

To report unlawful content or a security vulnerability: contact@stanzafix.com.

Article 1 — Purpose, scope and acceptance#

These general terms (the “Terms”) govern the relationship between Stanza (“Stanza”, “we”) and any person who creates an account, orders a service or works as a specialist through stanzafix.com or the client portal.

They are accepted when the account is created and confirmed with every order. The version that applies to an order is the one in force on the day of that order. They prevail over any other document of the client, in particular its purchasing terms, unless Stanza agrees otherwise in writing. An accepted quote supplements the Terms and prevails over them for what it expressly provides (scope, price, timeline).

The Terms are mainly intended for businesses, whose relationship with Stanza is governed in particular by the French Commercial Code. Where the client is a consumer, or a business to which the law extends this protection, the protective provisions of the French Consumer Code also apply and prevail over any contrary clause.

The Terms can be viewed, saved and printed at any time from this page. They are written in French and English; in case of discrepancy, the French version prevails.

Article 2 — Definitions#

Client

the individual or legal entity that orders a service, together with the colleagues it invites to its area.

Consumer

an individual acting for purposes outside their trade, business, craft, profession or farming activity (preliminary article of the French Consumer Code).

Service

a fixed-price technical service described on stanzafix.com or in a quote: Consent Integration (Axeptio, Cookiebot or Didomi, and Google Consent Mode v2), Accessibility Fast-Scan (accessibility, European Accessibility Act), Inbox Protocol (SPF, DKIM, DMARC, BIMI), Server-Side Tracking (server-side Google Tag Manager, Meta Conversions API), Lead Fast-Response (Make or Zapier automations), as well as packs and multi-domain work on quote.

Specialist

an independent professional selected and vetted by Stanza, to whom Stanza entrusts the performance of a service.

Required items

the access, credentials, files and information listed in the client area and needed to perform the service.

Confidential access

credentials, passwords, keys or tokens provided by the client to allow the work.

Deliverable

the result handed over at the end of the service: completed configuration, report, documentation, verification evidence.

Portal

the online area where the client follows orders, sends items, talks to Stanza and approves deliveries.

Closure

the end of an order: approval of the delivery by the client, or cancellation.

Business day

Monday to Friday, excluding public holidays in mainland France.

Article 3 — Accounts and portal access#

• Clients: anyone can create an account, with an email address and password or with Google sign-in. Clients may invite colleagues; they remain responsible for the people they invite and their actions in their area.
• Specialists: accounts are created by invitation from Stanza only.
• Stanza administrators: two-factor authentication (TOTP app) is mandatory.

Each user provides accurate, up-to-date information, keeps their credentials secret and tells us without delay about any unauthorized use of their account.

Stanza may suspend an account in case of a security threat, fraud or serious breach of the Terms, after notifying the user except in an emergency. Account holders may delete their account at any time (see Deleting your account).

We use our best efforts to keep the portal available and secure, but cannot guarantee uninterrupted availability (maintenance, incidents at a hosting provider).

Article 4 — Ordering and prices#

The client chooses a service and a timeline on stanzafix.com, or accepts a quote received through a personal link. Before paying, the client sees an order summary (service, timeline, total price) and can correct any error; the order is only placed after final confirmation on the secure Stripe Checkout payment page (article 1127-2 of the French Civil Code).

The contract is formed when the payment is authorized. A confirmation is sent by email and the order appears in the client area with the list of required items. The contract is archived and remains available in the client area or on request.

Prices are fixed, stated in euros and exclusive of VAT. VAT is added at the applicable rate where due; otherwise the exemption notice appears on the invoice. The applicable price is the one displayed, or the one in the quote, at the time of ordering; a quote is valid until the date it states. Packs, multi-domain work and needs outside the catalogue are quoted.

Stanza may refuse an order that is unlawful, whose scope exceeds the service description, or from a client who has seriously breached its obligations; the payment authorization is then released without any charge. As long as work has not started, the client may ask to cancel the order through the messaging: the authorization is released free of charge.

Article 5 — Payment and capture#

• Payment is made by card through Stripe, a licensed payment institution. Stanza never sees or stores card numbers.
• When you order, your card is only authorized: the amount is reserved, not charged.
• The amount is captured after the client approves the delivery, minus any refund due under the timeline guarantee (article 6).
• A card authorization is valid for 7 days. If it expires before approval, Stanza may ask the client to authorize the card again or send a payment link for the same amount, payable on receipt.
• Invoices are issued through Stripe and remain available in the client area (Documents).

The client approves the delivery in the portal, or raises specific, reasoned reservations. If the client neither approves nor raises reservations within 7 days of the delivery notice, and does not respond to a reminder, the delivery is deemed accepted and the price is captured. Justified reservations are handled at no cost, then the delivery is presented again.

For business clients, any amount unpaid when due automatically bears late-payment interest at the rate applied by the European Central Bank to its most recent refinancing operation plus 10 percentage points, together with a fixed recovery fee of €40 (articles L441-10 and D441-5 of the French Commercial Code). No discount is granted for early payment.

Article 6 — Timelines, pauses and timeline guarantee#

When the clock starts

The clock starts once Stanza has received all required items (working access, files, information). The portal shows the start date and the deadline at all times.

Pauses

The clock is paused, and the deadline pushed back by the length of the pause:

• while a required item is missing or stops working (access revoked, password changed, insufficient rights);
• in Express and Flash only, while an urgent blocking issue declared by the specialist is open, meaning an answer or action from the client without which the work cannot continue. The client is notified immediately.

Every pause is time-stamped and visible in the portal.

Timeline guarantee

If the delivery is made after the deadline, Stanza refunds 50% of the price excl. VAT of the service in Standard, and 100% in Express or Flash. This amount is deducted automatically at capture, or refunded to the card if the capture has already taken place.

The guarantee does not cover packs or quoted work: their timeline is set after the order (packs) or in the quote, and Stanza undertakes to meet it without a lump-sum refund. Nor does it apply to a delay attributable to the client or to force majeure within the meaning of article 1218 of the French Civil Code, including a prolonged outage of a third-party platform essential to the service.

For business clients, this refund is the lump-sum and exclusive compensation for delay. Consumers also keep all the rights granted to them by law if the timeline obligation is breached (articles L216-1 et seq. of the French Consumer Code).

Article 7 — Client obligations#

The client undertakes to:

• promptly provide accurate and complete required items with sufficient rights, preferably by creating temporary or dedicated access rather than sharing personal credentials;
• keep this access valid throughout the work and notify Stanza before any change;
• hold the rights to the websites, accounts, domains and tools concerned, or have their owner’s permission;
• answer the specialist’s questions, in particular urgent blocking issues in Express and Flash;
• back up its data and configurations before the work where possible;
• check the delivery, then approve it or raise specific reservations (article 5);
• revoke temporary access or change the passwords provided after closure — Stanza erases confidential access on its side at closure;
• save its deliverables: all order data is deleted 30 days after closure.

The client remains in charge of the decisions that are its own: the content of its policies and consent texts, the legal settings of its tools, compliance decisions. Services are technical: they are not legal advice and do not, by themselves, guarantee the client’s regulatory compliance (GDPR, accessibility, email deliverability…).

Article 8 — Independent specialists and payouts#

Stanza is the client’s sole contracting party: it is responsible for the service ordered, even when it entrusts the work to a specialist.

Specialists are independent professionals, selected and vetted by Stanza. They are neither employees nor agents of Stanza, organize their work freely within the scope and timeline of the assignment, and are responsible for their own social security, tax and reporting obligations. They are bound by confidentiality (article 10) and act on Stanza’s instructions regarding personal data (article 14).

Specialists are paid through Stripe Connect. Their bank details are collected and held by Stripe, never by Stanza, and Stripe verifies their identity (know-your-customer obligations). Opening a connected account requires accepting the Stripe Connected Account Agreement, which includes the Stripe Services Agreement. Payment for an assignment is transferred after the client approves the order.

A specialist’s profile (name or business name, logo, working languages, weekly availability) is used to assign work. Each specialist guarantees that this information is accurate and that they hold the rights to what they publish.

Article 9 — Delivery, deliverables and intellectual property#

Delivery is notified in the portal and by email. Deliverables can be downloaded from the client area until the order data is deleted, 30 days after closure.

Once the price has been paid in full, the client may use, reproduce, modify and adapt the deliverables for the needs of its business, worldwide and for the full term of the rights. Configurations made in the client’s tools belong to the client.

Stanza and its specialists retain their know-how, methods, templates, scripts and generic tools, whether pre-existing or developed independently. Where they are included in deliverables, the client receives a non-exclusive, free and perpetual licence to them, limited to the use of those deliverables.

Third-party software and services (Google, Meta, Axeptio, Cookiebot, Didomi, Make, Zapier…) remain subject to their own terms; the related subscriptions are paid by the client.

Article 10 — Confidentiality#

Stanza, its specialists and its providers keep strictly confidential the client’s access, data, files and information they learn of, and use them only to perform the order. This obligation applies during the contract and for five years after it ends; for confidential access, it has no time limit.

Confidential access is encrypted in the application (AES-256-GCM), visible only to the assigned specialist during the work, every reveal is logged, and it is erased automatically when the order closes (see Confidential access).

Information that is public or already lawfully known is not confidential, nor is information whose disclosure is required by law or by an authority; in the latter case, the party concerned informs the other where permitted.

Article 11 — Liability#

Stanza performs the services with care and in line with professional standards, under an obligation of means, except where an obligation of result is expressly provided (timeline guarantee).

Business clients

To the extent permitted by law:

• Stanza’s liability is limited to direct and foreseeable damage and capped, for all causes combined, at the price excl. VAT of the order concerned;
• Stanza is not liable for indirect damage (loss of revenue, customers, data or opportunity), nor for the consequences of inaccurate items provided by the client, of later changes to its tools by the client or a third party, or of a decision or change by a third-party platform (Google, Meta, email providers…);
• any liability claim must be brought within one year of the event giving rise to it (article 2254 of the French Civil Code).

These limits do not apply in case of gross negligence or wilful misconduct, personal injury, or where the law prohibits limiting liability.

Consumers

Nothing in the Terms limits or excludes Stanza’s liability towards a consumer beyond what the law allows. Consumers benefit from all statutory rights and guarantees, including, where it applies, the legal guarantee of conformity.

Force majeure

Neither party is liable for a failure caused by force majeure (article 1218 of the French Civil Code). If the impediment lasts more than 30 days, either party may terminate the order concerned; the payment authorization is then released, or amounts not justified by work performed are refunded.

Article 12 — Right of withdrawal (consumers)#

If you are a consumer, or a business with no more than five employees ordering a service outside the scope of its main activity (article L221-3 of the French Consumer Code), you have 14 days from the conclusion of the contract to withdraw, without giving reasons or paying any fee (article L221-18).

Starting before the end of the period

Work only starts during this period if you expressly request it when ordering. If you withdraw after work has started, you pay an amount proportionate to the service provided until you informed us of your decision (article L221-25).

Once the service has been fully performed before the end of the period, following your prior express consent and your express acknowledgment that you lose your right of withdrawal, that right can no longer be exercised (article L221-28, 1°). Without an express request from you, work starts when the withdrawal period expires, and the timelines in article 6 start on that date.

How to withdraw

Before the period expires, send us an unequivocal statement at contact@stanzafix.com or through the portal messaging, for example using the model below. We acknowledge receipt without delay and refund any amounts due within 14 days of receipt, using the payment method used for the order, or simply release the authorization if nothing has been captured.

Article 13 — Complaints and mediation#

For any complaint, write to us through the portal messaging or at contact@stanzafix.com, stating the order reference. We reply as quickly as possible and first look for an amicable solution.

If you are a consumer and your written complaint has not been resolved, you may refer the matter free of charge to the consumer mediator Stanza is registered with, within one year of that complaint: [to be completed] (articles L612-1 et seq. of the French Consumer Code). Mediation is optional.

Between businesses, the parties endeavour to settle any dispute amicably for 30 days before taking legal action, except in an emergency.

Article 14 — Personal data#

How Stanza processes users’ personal data is described in the privacy policy, which forms part of the Terms.

Data processed on the client’s behalf

To perform a service, the specialist may access client tools containing personal data of third parties (visitors, leads, the client’s customers). For this data, the client is the controller and Stanza acts as a processor within the meaning of article 28 GDPR. This article sets out the corresponding contractual terms:

• Subject matter and duration: performance of the order, during the assignment. Nature: configuration, testing and technical checks. Data and data subjects: those present in the tools the client gives access to.
• Stanza processes this data only on the client’s documented instructions (the order and the exchanges in the portal) and informs the client if an instruction appears to infringe data protection law.
• Only people who need it have access, and they are bound by confidentiality.
• Stanza applies the security measures described in the Security section.
• The client gives general authorization to use the specialists and providers listed in the Recipients section, including for the safeguarded transfers described in the Transfers section. Stanza imposes the same obligations on them, informs the client of any intended change, and the client may object on legitimate grounds.
• Stanza assists the client in responding to data subject requests, in ensuring the security of processing and, where relevant, in carrying out an impact assessment.
• Stanza notifies the client of any personal data breach affecting it without undue delay, and no later than 48 hours after becoming aware of it.
• At closure, access is erased; order data is deleted 30 days later, with no copy kept, unless required by law.
• Stanza makes available to the client the information needed to demonstrate compliance with these obligations and allows reasonable audits, at the client’s expense, with 30 days’ notice.

Article 15 — Changes to the Terms#

Stanza may update the Terms, in particular to follow changes in the law or in its services. The version and the date of the last update appear at the top of this page. For significant changes, users are notified by email or in the portal at least 30 days before they take effect, and may delete their account if they do not accept them. An order already placed remains governed by the version accepted when it was placed.

Article 16 — Governing law and courts#

The Terms are governed by French law.

Where both parties are traders (commerçants), any dispute relating to the formation, interpretation or performance of the Terms falls, failing an amicable settlement, within the exclusive jurisdiction of the courts for the place of Stanza’s registered office, including in case of multiple defendants or third-party claims (article 48 of the French Code of Civil Procedure). In other cases, the statutory rules on jurisdiction apply.

A consumer may bring proceedings, at their choice, before the court of the place where they lived when the contract was concluded or when the harmful event occurred, or any other competent court (article R631-3 of the French Consumer Code). A consumer residing in another EU Member State keeps the protection of the mandatory provisions of the law of their country of residence (Rome I Regulation, article 6).

If any clause is held invalid, the others remain in force. A party’s failure to rely on a clause does not waive its right to rely on it later.

Data controller and contact#

The data controller is Stanza, [to be completed]. For any question about your data or to exercise your rights: contact@stanzafix.com.

Stanza has not appointed a data protection officer, as this is not mandatory for its activity; your requests are handled directly by the controller.

This policy covers the client portal, the stanzafix.com website and your exchanges with Stanza. For third-party personal data we access in your tools during an assignment, we act as a processor (see article 14 of the Terms).

Data we process#

Clients and invited members

• Account: name, email address, company, language, role; password stored in hashed form by our authentication provider (never in plain text), or Google sign-in identifier.
• Orders: services, timelines, statuses, history, amounts and payment status — never the card number.
• Items sent: confidential access, files and information needed for the assignment.
• Deliverables: reports, documentation, verification evidence.
• Messages: exchanges with Stanza and, in urgent cases, the direct line with the assigned specialist (readable by Stanza), including attachments.
• Reviews: satisfaction rating and comment.

Specialists

• profile (name or business name, logo, working languages), weekly availability, assignments, messages and deliverables;
• payout data through Stripe Connect: bank details and identity verification documents are collected and held by Stripe, never by Stanza, which only sees the account status and amounts paid.

All users and visitors

• Security logs: sign-ins, sensitive actions, reveals of confidential access (date, time, author), IP address and technical browser information.
• Contact and quote requests: name, email, company, message.
• Website analytics, only with your consent: pages viewed, traffic source, cookie identifiers, approximate technical data (device type, city).

We do not process any special categories of data within the meaning of article 9 GDPR; please do not send us any.

Sign in with Google#

If you choose “Continue with Google”, Google shares with us, with your permission, only the basic information of your Google account: name, email address and profile picture (openid, email and profile scopes). We do not request any access to your emails, files, calendar or contacts.

• This information is used only to create your account, identify you and sign you in to the portal.
• It is never sold, never used for advertising and never shared with third parties, except the technical processors needed to run the service (authentication, hosting) or where required by law.
• Stanza’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• You can remove this access at any time from your Google Account settings; your Stanza account can then be used with a password, or deleted.

Purposes, legal bases and retention#

Where processing is based on your consent, you can withdraw it at any time, without affecting processing already carried out. Data needed for the contract is mandatory: without it, we cannot create your account or fulfil your order.

No decision producing legal effects concerning you is based solely on automated processing, and we do no profiling. We only send service emails; if we ever write to you about our services, you can object at any time using the link in each message.

Confidential access: our commitment#

The credentials you entrust to us are handled with particular care:

• they are encrypted in the application with AES-256-GCM before being stored: the database never contains your passwords in plain text;
• they are visible only to the specialist assigned to your order, and only during the assignment;
• every reveal is logged (who, when);
• they are erased automatically when the order closes.

Our advice: create temporary or dedicated access for the assignment, then revoke it after delivery.

Recipients and processors#

Your data is accessible only to people who need it: authorized Stanza staff, and the specialist assigned to your order, for that order’s data only. It is never sold or rented.

We use the following providers, bound by a data processing agreement compliant with article 28 GDPR:

For specialists’ identity verification and for fraud and anti-money-laundering checks, Stripe acts as an independent controller: see the Stripe privacy policy. The same applies to Google for the management of your Google account: see the Google Privacy Policy.

Finally, we may disclose data where required by law (judicial or administrative authorities) or to our advisers bound by professional secrecy (accountant, lawyer).

Transfers outside the European Union#

Our main data (database and files) is hosted in the European Union. As some providers are based in the United States, data may be transferred there or be accessible from there.

These transfers rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework where the recipient is certified, and otherwise on the Standard Contractual Clauses adopted by the European Commission (article 46 GDPR), supplemented where necessary by additional measures, in particular encryption. You can obtain a copy of these safeguards by writing to us.

Retention periods#

At the end of these periods, data is deleted or irreversibly anonymized. Our providers’ technical backups are overwritten according to their own short rotation cycle.

Security#

• encryption of communications (HTTPS) and of confidential access (AES-256-GCM);
• strict separation of data by account and by order at database level (row-level access rules);
• mandatory two-factor authentication for administrators;
• logging of sign-ins, sensitive actions and every reveal of confidential access;
• strict content security policy and protected session cookies (HttpOnly, Secure, SameSite);
• automatic deletion of data as soon as it is no longer needed.

In the event of a personal data breach likely to put your rights at risk, we notify the CNIL within 72 hours and inform you where the law requires it.

Your rights#

You have the following rights over your data (articles 15 to 22 GDPR):

• access: know what data we hold and obtain a copy;
• rectification: correct inaccurate or incomplete data — most of it can be edited directly in “Account and security”;
• erasure: have your data deleted, subject to our legal obligations;
• restriction: have the use of your data temporarily frozen;
• objection: object to processing based on our legitimate interest on grounds relating to your situation, and at any time to direct marketing;
• portability: receive the data you provided in a structured, commonly used and machine-readable format;
• withdrawal of consent at any time, in particular for analytics cookies;
• post-mortem instructions: decide what happens to your data after your death (article 85 of the French Data Protection Act).

To exercise them, write to contact@stanzafix.com or use the portal messaging. We respond within one month, which may be extended by two months for complex requests; you will be informed if so. Where we have reasonable doubts, we may ask you to prove your identity. Exercising your rights is free of charge.

If, after contacting us, you believe your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr — or with the supervisory authority of your country of residence.

Deleting your account#

Clients and specialists can delete their account at any time with the “Delete my account” button in “Account and security”.

• your personal data is deleted or anonymized in cascade: profile, items sent, files, messages, preferences;
• only orders that accounting law requires us to keep are retained, in anonymized form (reference, amount, dates);
• deletion is refused while an order or assignment is in progress: wait for it to close, or contact us;
• a specialist’s Stripe Connect account is not deleted by this action: it remains governed by Stripe;
• if you signed in with Google, also remember to remove Stanza’s access in your Google account.

Minors and changes to this policy#

Our services are intended for businesses and adults. They are not directed at people under 18, and we do not knowingly collect their data.

We may update this policy; the version and date appear at the top of the page. For significant changes, we notify you by email or in the portal before they apply.

Client portal: strictly necessary only#

The portal uses no advertising or analytics cookies. The trackers below are strictly necessary for the service you request: they are exempt from consent.

stanzafix.com website: analytics with your consent#

The website uses Google Analytics 4 to understand its traffic (pages viewed, traffic sources). These cookies (_ga, _ga_…) are set only after your consent, collected through the banner shown on your first visit. Refusing is as easy as accepting and does not prevent you from using the website.

Analytics cookies last 13 months at most, and the related statistics are kept 14 months at most.

Managing your choices#

• On the website: change or withdraw your consent at any time using the cookie settings link at the bottom of every page.
• In your browser: you can block or delete cookies; blocking the portal’s strictly necessary cookies will, however, prevent you from signing in.
• Learn more: CNIL advice on controlling your browser (in French).