Privacy policy

This privacy policy describes how Hydroponia collects, processes, and protects your personal data, in accordance with the General Data Protection Regulation (GDPR) and applicable French data protection law.

Data controller

Purpose of processing

Your data is collected and processed for the following purposes:

  • Creating and managing your user account
  • Providing the hydroponic kit monitoring service (measurements, crops, stock, interventions)
  • AI-assisted analysis of the measurements you submit, when you enable this feature
  • Capturing photos of your setup through your own connected camera, if you configure one
  • Managing your subscription and related payments
  • Sending notifications related to the operation of the service (analysis status, exhausted credits, etc.)
  • Complying with our legal and accounting obligations
  • Ensuring the security of the service and preventing fraudulent use

Legal basis

Our processing activities are based on:

  • Performance of the contract between you and Hydroponia (account creation, service delivery, subscription)
  • Your consent, in particular for enabling AI analysis or connecting a camera
  • Compliance with legal obligations, in particular accounting and tax obligations related to billing
  • Artalis Studio's legitimate interest in ensuring the security, reliability, and continuous improvement of the service

Data we collect

Depending on how you use the service, the following data may be collected:

  • Identity and login data: name, email address, password (stored encrypted)
  • Measurement data: pH, EC, temperature, and water level readings, associated notes, and the history of your crops and interventions
  • Stock data: products you record, quantities, purchase dates
  • Photographs taken by your own connected camera, either automatically during a measurement or for timelapse generation
  • Payment data: billing history and subscription status (bank card details themselves are neither collected nor stored by Hydroponia — see below)
  • Technical data: IP address, connection logs, cookies strictly necessary for the service to function

Recipients of your data

Your data is processed by:

  • Artalis Studio, as the publisher of the service
  • Hetzner Online GmbH, which hosts the application and database
  • Stripe, for the secure processing of payments and subscriptions
  • Google LLC, via the Gemini API, for AI-assisted analysis of the measurements you voluntarily submit to this processing
  • Your own Home Assistant instance, if you configure a connected camera — this instance belongs to you and is not operated by Artalis Studio

We ensure that these providers offer sufficient guarantees regarding data security and confidentiality.

Transfers outside the European Union

Data hosted by Hetzner and billing-related data remain located within the European Union.

Some specific processing activities do however involve a transfer of data to servers located outside the EU, in particular in the United States:

  • Measurements and contextual information sent to Google (Gemini API) when you enable AI analysis
  • Payment data sent to Stripe

In these cases, Artalis Studio ensures that such transfers rely on safeguards recognized by the GDPR, such as standard contractual clauses or the relevant provider's adherence to a recognized certification framework (Data Privacy Framework).

Retention period

  • Your account and measurement data are retained for as long as you use the service, and deleted after a prolonged period of inactivity or upon request to delete your account
  • Billing data is retained for 10 years, in accordance with legal accounting obligations
  • Photographs from your cameras are retained according to the timelapse retention policy, which you can manage directly from your account
  • Technical cookies are retained for the duration of your session or according to their specific purpose

Your rights

In accordance with applicable regulations, you have the following rights over your personal data:

  • Right of access to your data
  • Right to rectification or erasure
  • Right to restriction of processing
  • Right to object to processing
  • Right to data portability
  • Right to withdraw your consent at any time, in particular for AI analysis

You can exercise these rights by contacting us at: [email protected]

You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), if you believe your rights are not being respected.

Cookies

Hydroponia only uses technical cookies strictly necessary for the service to function: maintaining your login session and protecting against attacks (CSRF token). No advertising or third-party analytics cookies are used on the service.

Data security

Artalis Studio implements appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of your data, including the encryption of passwords and sensitive camera connection credentials.

Contact

For any question regarding this privacy policy or the exercise of your rights, you can contact us at: [email protected]