Last updated: 28 September 2026
This English version is a translation provided for convenience. In case of discrepancy, the French version prevails.
This policy explains which personal data we process on zmlabs.net and through our services, why, and what your rights are. It applies under the General Data Protection Regulation (GDPR) and, for people located in Quebec, the Act respecting the protection of personal information in the private sector (Law 25).
1. Data controller
Victor ZAKRZEWSKI, sole trader (Agence ZM, ZM Labs brand), 47 Pierrefiche, 48000 Barjac, France. Contact for any question about your data: contact@zmlabs.net.
2. Data processed and purposes
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Contact form | Name, email address, message | Legitimate interest (answering your request) | 3 years after the last exchange |
| Support form | Name, email address, message, technical information you provide | Performance of the contract (Premium license) or legitimate interest | Duration of the license, then 3 years |
| SafeAlt waiting list (formerly MetaVision Alt SEO), closed | Email address, date and proof of consent | Consent (can be withdrawn at any time) | Deleted after the launch announcement email, or as soon as you unsubscribe |
| SafeAlt account | Contact email address (required when connecting), site address, plan and license | Performance of the contract | For as long as the service is used |
| Purchase of a Premium license or a SafeAlt plan | Processed by Freemius (identity, billing, payment); we receive name, email and license information | Performance of the contract; legal obligations | 10 years (legal retention period for accounting records) |
| Server technical logs | IP address, date, page requested | Legitimate interest (security) | 1 year (legal obligation of the host) |
| Audience measurement (Google Analytics) | IP address, browsing and interaction data | Consent (can be withdrawn at any time) | 14 months maximum |
We use Google Analytics to measure the audience of our website, subject to your consent. We never sell or rent your data.
3. Recipients and processors
- PlanetHoster, host of the website and email, with servers in France and Switzerland (Switzerland benefits from an adequacy decision of the European Commission). PlanetHoster also keeps, on a European node, the daily backup of SafeAlt accounts (plans, licenses, site addresses, with no image or text), stored for 30 days.
- Chunkserve, host of the SafeAlt service servers, located in the Netherlands: they process the images sent for description and the accounts of connected sites. Chunkserve acts as a processor for ZM Labs.
- Freemius, Inc., reseller of our licenses and subscriptions, based in the United States, which acts as controller of its own processing (payment, invoicing, VAT). Its privacy policy applies at purchase and describes the safeguards for data transfers outside the European Union.
- Google Ireland Limited (and Google LLC in the United States), for the Google Analytics service. Audience data may be transferred to the United States. This transfer is covered by standard contractual clauses and the Data Privacy Framework.
4. Our plugins and your data
Accounting Export for WooCommerce calculates entries on your own server. Export files, which contain your customers’ data, are stored in a protected folder of your site; remember to delete them from the history when you no longer need them. No accounting data is sent to ZM Labs.
SafeAlt sends our servers, located in Europe, a reduced copy of each image to describe, without its metadata (EXIF, GPS position), together with useful context (title and category of the page, business activity, site name and tagline, file name). For this data, ZM Labs acts as a processor for the site owner. Nothing is sent before an administrator has connected the site and accepted the sending. The contact email address, required when connecting, is used to link purchases to the site and to contact its owner about the service, never for marketing.
- Images are analysed by our own artificial intelligence models: none is sent to a third-party AI provider, used to train a model, sold or shared.
- Each image is deleted as soon as its analysis is finished.
- Context and written texts are deleted after 30 days; the intermediate visual description (text, without the image) 30 days after its last use; processing records, without content, after 90 days.
- The service keeps no access log; IP addresses are only used for rate limiting and are not stored.
- No image or content from your site is sent to Freemius. When you buy from the plugin, the administrator’s email address is pre-filled in the Freemius payment form, which then processes it for the sale.
A data processing agreement (DPA) is available on request at contact@zmlabs.net.
5. Your rights (GDPR)
You have the right of access, rectification, erasure, restriction, objection and portability, and the right to withdraw your consent at any time. Write to contact@zmlabs.net; we reply within one month. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the supervisory authority of your country.
6. People located in Quebec (Law 25)
The person in charge of the protection of personal information is Victor Zakrzewski (contact@zmlabs.net). You may access your information, ask for it to be corrected, withdraw your consent or request the portability of your data. Your information may be communicated outside Quebec (hosting in Europe, Freemius reseller, visit statistics through Google LLC); we make sure it receives adequate protection there. If you disagree, you may contact the Commission d’accès à l’information du Québec.
7. Security
The website is served over HTTPS, administrative access is restricted, and backups are stored outside the public area of the site.
8. Cookies
See the cookie policy for details on trackers and how to manage your consent.