Privacy Policy
Doudou Postal · https://doudoupostal.fr · Effective October 18, 2026
Doudou Postal is an online service that creates illustrated postcards featuring a child's cuddly toy, then prints and mails them. It is operated by Biliplan SAS, 19 Résidence Beau Soleil, 92210 Saint-Cloud, France, the data controller. Contact: contact@biliplan.com.
1. Google user data
Users sign in to Doudou Postal exclusively with "Sign in with Google".
1.1 Data accessed and how it is used
We request only the basic openid, email and profile scopes, and no others. Here is each piece of data received from Google and what we do with it:
| Google data | Scope | Use | Storage |
|---|---|---|---|
| Unique Google account ID | openid | Recognize you at each sign-in and link the sign-in to your Doudou Postal account | Database, as long as the account exists |
| Email address | Identify your account, contact you about your orders, show it on your invoices | Database, as long as the account exists | |
| "Email verified" status | Only open an account for an address verified by Google (security) | Database, as long as the account exists | |
| Name | profile | Greet you in your personal area, show it on your invoices | Database, as long as the account exists |
| Profile picture | profile | Display it next to your name in your personal area (only its web address is stored, not the image) | Database, as long as the account exists |
| Sign-in tokens (access token, ID token) | openid | Validate the sign-in only; never used to read any other Google data | Database (access token encrypted), as long as the account exists |
We do not access any other data from your Google account: no Gmail, contacts, calendar, Drive, Photos, or any activity data stored by Google.
Google user data is not used for any other purpose: no advertising, no profiling, no sale. Google user data is not used to develop, improve or train generalized artificial intelligence or machine learning models, and it is not sent to our AI provider.
1.2 Data sharing
We do not sell or rent Google user data. It is only shared with:
- our hosting provider (in France), which stores the service database;
- our payment provider, which receives your name and email address to issue invoices;
- public authorities, only when required by law.
1.3 Data storage and protection
- Stored in a database hosted in France, accessible only by the service's server.
- Encryption in transit (HTTPS) and encryption at rest of the OAuth tokens received from Google.
- Sessions protected by a secure cookie (HttpOnly, Secure, SameSite); no password is stored.
- Strict access control: each user can only access their own data; service credentials are never stored in source code.
- Within Doudou Postal, only authorized administrators can view accounts (name, email address), photos and cards, solely for support and to operate the service; every such access is logged.
1.4 Data retention and deletion
- Google user data is kept as long as your account exists.
- You can delete your account at any time from your personal area: "Mon compte" > "Supprimer mon compte" (My account > Delete my account). Your Google user data and all other account data are then deleted immediately from the database, and from backups within 30 days.
- You can also request deletion by email at contact@biliplan.com, or revoke Doudou Postal's access at myaccount.google.com/permissions.
1.5 Limited Use disclosure
Doudou Postal's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
2. Other data we process
- Photos and details of your toys (name, description, relative size): to create the illustrations and stories, generated automatically by artificial intelligence. Photos uploaded for a trial before creating an account are identified by a cookie and deleted after 7 days if no account is created.
- Recipients' names and postal addresses, card texts: to print and mail the cards.
- Orders and subscription, without card numbers: for invoicing.
- Technical logs (IP address, browser): for security.
Legal bases: performance of the contract, legal obligations (accounting), legitimate interest (security). The service is for adults only; about the child we only receive the first name and address entered as recipient, and photos must show only the toy. This data is entrusted only to our service providers, each for its own task: hosting (France), payment, AI image generation, printing and mailing (France). Transfers outside the European Union, notably to the United States, are covered by GDPR safeguards (adequacy decision or standard contractual clauses).
3. Retention
Trial without an account: 7 days at most. Account: as long as it is active, then deleted when the account is deleted (backups within 30 days). Invoices: 10 years (legal obligation). Technical logs: 12 months maximum.
4. Your rights
Access, rectification, erasure, restriction, objection, portability: write to contact@biliplan.com; we reply within one month. You may lodge a complaint with the CNIL (cnil.fr).
5. Cookies
Two strictly necessary cookies: one keeps you signed in, the other retrieves a trial started without an account (7 days). No advertising or analytics cookies. The payment page may set its own security cookies.
6. Changes
The date at the top shows the latest update. We will notify you by email of any significant change.