Providers and subprocessors
The service’s providers, purposes, data categories and available transfer information.
Last updated: October 1, 2026
This page is a translation provided to make it easier for you to read. Only the French version is legally binding: in the event of any difference, the French version applies.
1. Scope of the list
This page presents the providers identified by name and the categories of services that may be involved depending on the features used.
A provider only receives the data related to its function. Its exact role, the location of the processing and the applicable safeguards depend on the service and the contract concerned.
2. Public site hosting
Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States, provides the hosting and delivery of the public website.
- Purpose: serving the web application, routing requests and producing the technical logs needed to operate it.
- Possible data: IP address, request information, technical logs and content sent to the web server depending on the route used.
- Transfer safeguard applied to the Fichea contract: information to be completed.
3. Services linked to the account and content
Running an account requires authentication, database and storage services. Provider, contracting entity, regions and transfer safeguards: information to be completed.
The data concerned may include the email address, the account identifier, learning content and the metadata needed to access it. It remains subject to the retention periods described in the privacy policy.
4. Payment
Stripe Managed Payments handles subscriptions. The official merchant entity is identified on the payment page and in the transaction documents; Stripe manages payment, indirect taxes in the countries and transactions covered, and transactional support. This role is distinct from that of a simple technical subprocessor of Fichea.
Fichea receives the identifiers and statuses needed to track the subscription, without storing the full bank card number.
5. Artificial intelligence
A generation request sends the selected instructions and excerpts to the provider needed for this feature. Provider, legal entity, region, retention and conditions of data use: information to be completed.
6. Observability, audience and advertising
Observability services may receive limited errors and technical logs when they are enabled.
Audience and advertising measurement: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. These services are only loaded after the corresponding choice in the consent panel; with no choice or if declined, they stay inactive.
- Google Tag Manager: loads the authorized measurement tags. It is not loaded until an optional purpose has been accepted.
- Google Analytics 4 (statistics): pages viewed, journeys, device type, approximate country and product events (sign-up, login, file import, successful generation of a sheet, quiz or flashcards, checkout start, purchase, refund). Purchases and refunds are sent from our servers only when the statistics consent is still valid, with a transaction identifier and the amount, without email address or name.
- Google Ads (advertising measurement and personalization): measurement of conversions from campaigns and, if you accept it separately, remarketing signals.
- Legal basis: your consent, which you can change or withdraw at any time from the privacy policy.
- Transfers: Google states that it relies on the EU–US Data Privacy Framework and on standard contractual clauses for data processed by Google LLC.
- Retention period of event data configured in Google Analytics: information to be completed.
7. Email delivery
Authentication uses the SMTP provider configured in Supabase. Resend is the intended transport for Fichea’s application messages when it is enabled, with separate identities for service messages and marketing communications.
The carrier receives the recipient address, the content of the message and the metadata needed for its delivery. Communication choices remain managed by Fichea. Marketing communications are excluded when consent is missing or has been withdrawn.
The technical sending region does not by itself guarantee exclusively European storage. The contractual terms, transfer safeguards and delivery checks are verified before the transport is activated.
8. Changes and questions
The date of this page is updated when a published provider changes. Where the law or the contract requires it, a significant change is communicated before it takes effect by an appropriate means.
To ask for the identity of a recipient involved in a specific feature or to exercise a right, write to contact@fichea.fr.