How Oricube uses information needed to operate PlaceHeberg.
Updated on 9 October 2026
Oricube, French SASU registered in Paris under number 105 247 993, at 47 rue Vivienne, 75002 Paris, France, controls processing relating to website visitors, accounts, orders and support. Data requests may be sent to [email protected] or by post.
Account information includes identity, contact and access details. Order and invoice information includes purchased services, amounts, dates, payments and invoice details. Support requests may include messages, attachments, technical information and diagnostics needed to resolve an issue.
Operations and security also use IP addresses, access logs, actions and service measurements. Required fields are needed for the relevant account, order or request; omitting them may prevent that operation.
Accounts, services, payments and support are processed to perform a contract or requested pre-contract steps. Invoicing, archiving and lawful authority requests rely on legal obligations. Proportionate fraud, abuse and access protection rely on Oricube’s legitimate interests.
Optional processing requiring consent, including non-essential trackers and marketing where consent is required, needs a prior revocable choice. Refusal does not block unrelated functions.
Information is accessible to authorised Oricube personnel and necessary service providers. The platform currently uses OVHcloud infrastructure and Cloudflare traffic and security services. External payments may use Stripe or PayPal, which receive necessary payment information subject to their own obligations.
Transactional email providers and technical suppliers for a purchased service may also process necessary information. Personal data is not sold. Information may be disclosed to an authority when required by law.
The assistant uses a model running locally on the service infrastructure. Its history is held in the website session, currently limited to 120 minutes of inactivity and the last 30 messages for this feature. If a ticket is created, the conversation and diagnostic may be attached and then follow support retention.
Diagnostics require a service belonging to the signed-in customer and may read its state, resources and relevant errors. The assistant does not independently make decisions producing legal effects. Do not send passwords or unnecessary personal information.
Account information is used during the customer relationship. Afterwards, only information needed for legal obligations, contract evidence or disputes is retained within applicable limits. Accounting records must be retained for 10 years under the legal requirements.
Support messages, logs and diagnostics are retained according to the needs of issue resolution, security, evidence and applicable limitation periods, not indefinitely. Detailed operational retention and deletion rules still need to be formalised by Oricube. Erasure requests take legally required retention into account.
Hosted data follows the service’s contractual deletion rules. Backup copies follow their replacement cycle and are not permanent storage.
Some providers, including security and payment providers, may involve access or transfers outside the European Economic Area. Relevant countries and safeguards must be assessed for the processing, including applicable adequacy decisions or contractual safeguards and necessary supplementary measures.
This policy does not claim that all information remains exclusively in France. Contact Oricube for further information about recipients and safeguards for your data.
Subject to GDPR conditions, rights include access, correction, erasure, restriction, objection and portability. Consent may be withdrawn without invalidating earlier lawful processing. Contact Oricube with your request; a proportionate identity check may be necessary.
Requests are generally answered within one month, subject to lawful extensions. You may complain to the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or through www.cnil.fr.
Session, sign-in, basket and security functions use technical cookies. Language, theme and interface preferences may be stored in your browser. The session currently expires after 120 minutes of inactivity; browser settings can clear preferences.
Non-essential cookies requiring consent must not be set beforehand. Closing a notice or continuing to browse is not consent. Any such activation must offer refusal as easily as acceptance and a way to withdraw the choice.
This policy covers PlaceHeberg management and does not replace customers’ obligations to inform their own users. Processing on a customer’s behalf requires an appropriate data processing agreement covering instructions, security, subprocessors and the treatment of data when the service ends.