Privacy Policy / Politique de confidentialité
Last updated / Dernière mise à jour : February / Février 2026
1. Data Controller / Responsable du traitement
iCelebrate is operated by:
AyCommerce LLC
Represented by: Younes AAZEDINE
Registered address: 30 N Gould St Ste R, Sheridan, WY 82801, United States
Registered Agent: Registered Agents Inc, 30 N Gould St Ste R, Sheridan, WY 82801
Email: aycommercellc@outlook.com
2. Data We Collect / Données collectées
iCelebrate collects the following categories of personal data:
2.1 Account & Identity Data
- Email address or phone number (depending on sign-up method)
- First and last name (optional, user-provided)
- Profile picture (optional)
- Unique identifier generated by our authentication provider (Clerk)
Authentication is handled by Clerk, Inc. (sub-processor). Clerk's privacy policy is available at clerk.com/privacy.
2.2 Data About Your Contacts
When you add people to iCelebrate, you may enter:
- Name
- Date of birth / birthday
- Personal notes
- Circle membership
- Occasions and events
- Gift ideas and wish lists
- Event photos
⚠️ Important: Data you enter about third parties (your contacts) is your responsibility. iCelebrate is a strictly personal tool. You must ensure you have the legal right to store this information (e.g., personal/household use exemption under GDPR Art. 2.2.c, or equivalent under applicable local law).
2.3 Technical Data
- IP address (collected by servers on each request)
- Browser type and operating system
- Pages visited and actions taken (server logs)
- Session cookies (required for authentication)
3. Purposes & Legal Bases / Finalités et bases légales
| Purpose / Finalité | Legal Basis / Base légale |
|---|---|
| Account creation and management | Contract performance (ToS) |
| Authentication and session security | Legitimate interest / Contract |
| App features (people, occasions, gifts) | Contract performance |
| Birthday & occasion reminders | Consent (configurable in-app) |
| Service improvement (anonymized analytics) | Legitimate interest |
| Legal compliance | Legal obligation |
4. Data Retention / Durée de conservation
- Account data: retained for the lifetime of the account, then deleted within 30 days of account closure.
- Contact data (your people): deleted immediately upon account deletion or on request.
- Technical logs: retained for a maximum of 12 months.
- Billing records: retained for 7 years where legally required.
5. Data Sharing & Transfers / Destinataires et transferts
Your data is shared with the following sub-processors, strictly for the purposes stated:
| Sub-processor | Role | Location |
|---|---|---|
| Clerk, Inc. | Authentication & session management | United States (SCCs / adequacy) |
| Vercel, Inc. | Application hosting | United States (SCCs / adequacy) |
| Neon, Inc. | Application data storage (PostgreSQL) | United States — AWS (SCCs / adequacy) |
International data transfers from the EEA are governed by Standard Contractual Clauses (SCCs) approved by the European Commission, per GDPR Article 46. We never sell, rent, or trade your personal data.
6. Your Rights / Vos droits
Depending on your location, you may have the following rights regarding your personal data:
How to exercise your rights
Send your request to aycommercellc@outlook.com with your name, account email, and the nature of your request. We will respond within 30 days.
🇪🇺 EU / EEA Users — GDPR
You may lodge a complaint with your local Data Protection Authority (DPA). A full list of EU DPAs is available at edpb.europa.eu.
🇺🇸 California Residents — CCPA / CPRA
Under the California Consumer Privacy Act, you have the right to know, delete, and opt out of the sale of your personal information. We do not sell personal data. To submit a CCPA request, email aycommercellc@outlook.com.
🇨🇦 Canadian Users — PIPEDA / Law 25
You have the right to access and correct your personal information. Contact us at aycommercellc@outlook.com to exercise your rights.
🇬🇧 UK Users — UK GDPR
You may contact the Information Commissioner's Office (ICO) at ico.org.uk if you have concerns about how we process your data.
7. Cookies & Trackers
iCelebrate uses only the cookies strictly necessary for the service to function:
| Cookie | Purpose | Duration |
|---|---|---|
| __session (Clerk) | Authentication session | Session / 7 days |
| __client_uat (Clerk) | CSRF security token | Session |
| icelebrate_lang | Language preference | 1 year (localStorage) |
| icelebrate_gdpr | Consent choice record | 1 year (localStorage) |
We use no advertising, tracking, or third-party analytics cookies. You can manage or delete cookies through your browser settings at any time.
8. Data Security
We implement the following security measures to protect your data:
- All communications encrypted via HTTPS / TLS
- Secure authentication managed by Clerk (password hashing, brute-force protection, MFA support)
- Data access restricted to authorized personnel only
- Regular database backups
- Strict separation of production and development environments
In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify you promptly and notify the relevant supervisory authority within 72 hours (where required by law).
9. Children's Privacy
iCelebrate is not directed at children under the age of 13 (or 16 in the EU/EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at aycommercellc@outlook.com and we will promptly delete it.
10. Changes to This Policy
We may update this Privacy Policy to reflect changes to our service or applicable law. For material changes, we will notify users by email or in-app notification at least 15 days before the changes take effect. The date of the last update is always shown at the top of this page.
11. Contact
For any privacy-related question or to exercise your rights:
AyCommerce LLC — Younes AAZEDINE
30 N Gould St Ste R, Sheridan, WY 82801, United States
Email: aycommercellc@outlook.com