Privacy policy for commenters
Last updated: October 3, 2026
Are you a site publisher? Your data is processed under article 1 of our DPA, and your site's users' data under its article 2.
Who is responsible. SEMIOLOGIC (67 cours Mirabeau, 13100 Aix-en-Provence, France) is the controller of your GraphComment account: login details, security, login history, deletion. Your profile and contributions on each site are processed on behalf of that site's publisher, which is responsible for them: its own privacy policy applies.
Your account data. Email address, username, password (stored encrypted), social network identifier if you use one to log in (Google, Facebook, LinkedIn), language, and the history of your logins and profile changes, with the IP address used.
Why. To run your account across all sites (performance of the service), to secure it and prevent abuse (legitimate interest), to send you service emails (validation, notifications you opted into), and to meet our legal obligations.
How long. Account data: as long as your account exists. Login and change history: 12 months, unless the data is needed for an ongoing procedure (request from an authority, dispute), for as long as that procedure lasts. After your account is deleted:
After an account is deleted, a technical copy of the account, of the associated profiles, of the comments and of the pages, together with the IP address recorded at the time of the request, is kept for twelve (12) months, for the sole purpose of establishing the facts should the deletion be disputed. Once that period has expired, these copies are destroyed.
What we don't do. We do not sell any data. Our self-service plans never show advertising. Some publishers under a custom contract may show ads in their comments area: these are their choice and fall under their own privacy policy.
Who has access. SEMIOLOGIC and its processors, each for its role: DigitalOcean (hosting, servers in Amsterdam, the Netherlands), Brevo (email delivery, France), Mistral AI (moderation assistance, France). If you log in with a social network, it is informed of your login. As DigitalOcean is a US company, any transfer outside the European Union relies on its certification under the EU-U.S. Data Privacy Framework and, failing that, on the European Commission's Standard Contractual Clauses.
Your rights. Access, rectification, erasure, restriction, objection, portability, and instructions on what happens to your data after your death. Write to dpo@semiologic.fr or SEMIOLOGIC – 67 cours Mirabeau – 13100 Aix-en-Provence – France. We answer within one month (extendable by two months for complex requests). If you disagree, you may complain to the CNIL (www.cnil.fr).
Deleting your account.
You have the right to request the deletion of your personal data upon request or to do so yourself in the GraphComment admin, users’ personal data will be deleted in accordance with applicable legal requirements. This policy applies to all users of our application, regardless of their location. To do so, you can:
- by email: dpo@semiologic.fr
- by post: SEMIOLOGIC – 67 cours Mirabeau – 13100 Aix en Provence – FRANCE
You can also delete your account directly from the comments widget, in your account menu.
California residents (CCPA). You have the right to know which personal information we collect (see above), to request its deletion, to obtain a copy, and not to be discriminated against for exercising these rights. We do not sell your personal information and we do not share it for targeted advertising. To exercise your rights: dpo@semiologic.fr.