Cachet · Legal
Privacy policy
This policy describes the data processed by Cachet, the service that lets an AI agent send real postal mail in France for you. The data controller is Antoine Labbe, reachable at cachet@taraxe.com. Cachet shows no ads and uses no audience analytics. For the rest of taraxe.com, see the site's privacy policy.
Data processed
| Data | Purpose | Retention |
|---|---|---|
| Text of the letter, sender's and recipient's addresses | Laying out the letter, showing you its preview, having it printed and posted | At Merci Facteur, 30 days after printing; at Cachet, 30 days after the last tracking update; 7 days for a letter never paid |
| Price, dates, type of mail, recipient's name and La Poste tracking number | Tracking the letter, keeping the proofs of posting and receipt, accounting | 10 years, as required by accounting rules |
| Email address, language, account creation date, connected apps (Claude, ChatGPT…) and Stripe customer ID | Signing you in, connecting your agent, offering your saved cards again | As long as the account exists |
| Prepaid balance amount and top-up history | Paying your letters from the balance, accounting | As long as the account exists, then 10 years for accounting records |
| cachet_carte cookie, if you save your card with Stripe | Offering that card again when you pay for a later letter | 1 year |
| IP address, requested address, browser, country, time of the request | Technical logs to spot outages and abuse | 7 days at most |
Legal basis: performing the service you ask for (GDPR article 6.1.b) for the account, the letters and their payment, the publisher's accounting obligations (article 6.1.c), and its legitimate interest in the security of the service (article 6.1.f).
Your account
To connect Cachet to your agent, you sign in with your email address on the site page your app opens: you type in a 6-digit code received by email, and your account is created at that moment. At sign-in, Cloudflare Turnstile analyses technical browser signals to check that you are a person (legitimate interest, article 6.1.f), for the time of the check. After a first payment, the account keeps your Stripe customer ID, to offer your saved cards again. Aval, the other agent service on taraxe.com, has its own account, separate from this one. A letter sent from the free termination letter tool needs no account. Apps receive an access token, valid for 30 days and renewed until you disconnect them; the site only keeps a hash of it.
Your letters
For a letter sent with Cachet, the site keeps the letter's text, the sender's and recipient's addresses, the price and the La Poste tracking. It passes the letter and the addresses to Merci Facteur, which prints it and hands it to La Poste. The text and addresses are deleted by Merci Facteur 30 days after printing, and by Cachet 30 days after the last tracking update; a letter never paid is deleted after 7 days. Kept for accounting and proof: the price, dates, type of mail, tracking number and recipient's name, and, at Stripe, the payment description (recipient's name, postcode and town, subject of the letter).
Payment and saved card
Letters and top-ups are paid on Stripe's page: card details stay with Stripe, Cachet never sees them. If you tick “Save my payment information”, your browser keeps a cookie, cachet_carte, valid for one year: it lets Cachet offer that card again when you pay for a later letter, and is used for nothing else. You can remove the card from the payment page, or delete the cookie in your browser.
Test mode and address checks
In test mode nothing is kept: the preview lives entirely in its link, after the # sign, which the browser never sends to the server. Addresses to check are sent to IGN's Géoplateforme (the French public geocoding service) for the time of the lookup.
Recipients and transfers
Data is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, United States, phone +1 650 319 8930, and may be stored outside the European Union; this transfer relies on Cloudflare's certification under the EU-US Data Privacy Framework. Letters are passed to Merci Facteur and La Poste, payments to Stripe (Stripe Payments Europe, Ltd., Ireland), under its privacy policy, and the sign-in code email is sent through Resend, Inc., based in the United States: that email address therefore leaves the European Union. No data is sold or passed on to other third parties.
Your rights
You can ask to access, correct or delete your data, or to delete your account, by writing to cachet@taraxe.com. Answer within 30 days. You can also file a complaint with the CNIL, the French data protection authority (cnil.fr).