Privacy Policy

Kiamazulu Conseils is the controller responsible for processing your personal data within the meaning of the General Data Protection Regulation (GDPR — EU Regulation 2016/679).

Contact: Contact form

We collect the following categories of data:

• Identification data: username, email address, password (hashed)
• Profile data: profile picture, biography, country, language, social networks
• Content data: published videos, comments, likes, playlists
• Usage data: viewing history, searches, interactions
• Technical data: IP address, browser type, operating system
• OAuth login data: if you use Google
• Messages you send us by email: sender address, subject and content (attachments are not kept)

Connection country: we determine the country (and only the country — never your city or coordinates, no GPS, no fingerprinting) from your connection's network headers, to tailor regional content (trends, contests) and protect the integrity of contest votes. This minimised data is kept at most 24 h in a cookie and, for contest votes, logged with the vote.

Your data is processed for the following purposes:

• Provision and improvement of the Sonezza service (legal basis: performance of the contract)
• Personalization of the experience and recommendations (legal basis: legitimate interest)
• Sending notifications and transactional emails (legal basis: legitimate interest)
• Security, fraud prevention and moderation (legal basis: legal obligations)
• Anonymous audience measurement (legal basis: legitimate interest, under the CNIL consent exemption); with your consent, linking your browsing to your account and recording some visits to fix errors (legal basis: consent)
• Study of how people move through the site: with your consent, each visit is followed page by page and may be viewed by the Sonezza team (legal basis: consent)
• Targeted advertising within Sonezza Business (legal basis: consent)
• Informing holders of accounts carried over from reeme.net about the transfer of their account and their rights (legal basis: duty to inform, GDPR Article 14)
• Service announcements sent to registered users, with one-click unsubscribe in every message (legal basis: legitimate interest)
• Bot protection at sign-in, sign-up and contact (legal basis: legitimate interest)
• Handling the requests you send us by email, including replies to our messages and the exercise of your rights (legal basis: legitimate interest and legal obligations)

• Account data: lifetime of the account. On deletion, your personal data is erased and your publications are hidden immediately, then permanently deleted after 90 days (you can recover your account by signing in again during that period)
• Viewing history: rolling 12 months
• Comments and content: until deleted by the user or moderation
• Technical logs: 90 days
• GDPR exports: deleted 7 days after generation
• Accounts carried over from reeme.net: an account that has not signed in again 90 days after the information message may be deleted
• Replies received by email: kept for 365 days after they are handled
• Sending exclusion list (rejected addresses, unsubscribes): kept as long as needed to stop writing to an address that no longer receives our messages or that has unsubscribed
• Visit statistics (country, city, device; your account only if you accepted audience measurement): 13 months

Your data is never sold. It may be shared with:

• Supabase (database hosting, EU)
• Vercel (application hosting, EU/US)
• Resend, Brevo, Postmark, o2switch (sending emails)
• Cloudflare (CDN, DDoS protection and Turnstile anti-bot verification)
• Competent authorities upon judicial request

In accordance with the GDPR, you have the following rights:

• Right of access: obtain a copy of your data
• Right to rectification: correct your inaccurate data
• Right to erasure: delete your account and your data
• Right to portability: export your data (via Account > Export my data)
• Right to object: object to processing based on legitimate interest
• Right to restriction: restrict certain processing

To exercise your rights: our contact form. Response within 30 days. You may also lodge a complaint with the CNIL: cnil.fr

We use cookies to run the service, an anonymous audience measurement and, with your consent, measurement linked to your account and advertising. See our Cookie Policy for details.

We implement appropriate technical and organizational measures: TLS encryption, password hashing (bcrypt), role-based access control, regular audits. In the event of a data breach, we notify the CNIL within 72 hours and the affected users without delay.

Some of our providers (Vercel, Cloudflare) may process data outside the EU. These transfers are governed by Standard Contractual Clauses (SCC) approved by the European Commission, or an equivalent recognized mechanism.

Data Protection Officer (DPO)
Kiamazulu Conseils
Email: Contact form

The reeme.net site, which had been dormant, was taken over under the name sonezza.com by Kiamazulu Conseils, the controller of the accounts concerned. It was previously published in a personal capacity by Moukangala NGAKA and Ange-Gracias N'GAKA.

The data carried over is what was already on reeme.net: email address, username, profile, videos, comments and playlists. Each account holder receives a single information message about this transfer and their rights.

You can delete your account in one click from that message, or ask for erasure through our contact form. An account carried over that has not signed in again within 90 days of that message may be deleted.