General Conditions of Sale and Use

01Object

These General Conditions of Sale and Use (hereinafter "CGV/CGU") govern the contractual relationships between the publisher of the platform adrien.pro / Adrien PERROT (hereinafter "the Publisher" or "the service provider") and any natural or legal person (hereinafter "the customer") using the services offered via the platform.

Any order for services via the platform implies full and unreserved acceptance of these CGV/CGU by the customer.

02Publisher

Sole Proprietorship (Entrepreneur Individuel — EI) — Computer programming activities (APE Code 6201Z).

03Services Offered

The service provider offers engineering and development services for:

• Development of websites (showcase, e-commerce, intranet, ERP, custom web solutions)
• Hosting, managed services, maintenance and technical support for developed solutions
• Development of mobile applications (iOS, Android) and Progressive Web Apps (PWA)
• Development of Discord bots, API integrations, and custom business tools
• Technical consulting, architecture audits, and application cybersecurity

Each service is subject to a detailed quote electronically signed by the customer prior to the commencement of work.

04Order, Quote & Warranty

The ordering process takes place entirely through the adrien.pro platform:

1. The customer creates a project ticket describing their requirements.
2. A functional specification document (CDC) is drafted and submitted for customer validation.
3. A detailed quote is generated, outlining the services, the total amount excluding taxes, payment terms, and code ownership transfer options.
4. The customer electronically signs the quote via a single-use OTP code sent by email, which serves as a legally binding electronic signature pursuant to EU Regulation eIDAS (No. 910/2014) and Article 1367 of the French Civil Code.
5. A deposit (default 35% of total amount) is due upon signature to commence development.

The quote remains valid for 30 days from its date of issuance. Past this period, the service provider reserves the right to revise pricing.

Delivery Times & Iterations

Delivery timeframes are provided for guidance only and do not constitute strict commitments, unless expressly specified in the quote. The maximum number of revision cycles is strictly defined by the Specification document and Quote. Any additional work will require a supplementary quote.

Acceptance Testing & Tacit Validation

Upon delivery of the test/staging version, the customer has a period of 10 business days to conduct acceptance testing and submit any written reservations via the platform. In the absence of written reservations within this period, the deliverables are deemed tacitly accepted without reservation, rendering the remaining balance immediately due.

Post-Delivery Warranty (30-Day Bug Fix Period)

05Prices, Payment & Third-Party Costs

Prices are denominated in euros and quoted net of tax (HT). VAT is not applicable in accordance with Article 293 B of the French General Tax Code (CGI).

If the VAT exemption threshold is exceeded, applicable statutory VAT rates will apply.

Accepted Payment Methods

• Bank Transfer (official IBAN supplied on quote/invoice)
• Revolut / PayPal
• Stripe (credit card, recurring direct debits for hosting and maintenance subscriptions)

Third-Party Fees and External Services

Unless expressly included in the quote, costs associated with third-party services required for the project (such as domain name registrations/renewals, paid third-party API plans like OpenAI or Google Maps, banking gateway fees, or transactional email packages) remain the direct financial responsibility of the customer.

Late Payment Penalties

Customer delay: In accordance with Articles L441-10 and D441-5 of the French Commercial Code, late payments automatically incur:

• Late interest at the statutory annual rate of 15%
• A mandatory statutory recovery fee of €40

In the event of non-payment exceeding 30 days, the order may be cancelled and services suspended pursuant to Article 1224 of the French Civil Code.

Service provider delay: For justified delays (illness, force majeure, customer delays in providing assets), no late penalties shall apply to the service provider unless prior written agreement exists.

06Intellectual Property & Warranties

The customer receives an exclusive license of use for the solution. This license remains active as long as the customer is up to date with all invoices and hosting/maintenance subscriptions.

Open-Source Components & Third-Party Software

Third-party libraries, open-source frameworks (notably Vue.js, Nuxt, Node.js), and software dependencies incorporated into the solution remain governed by their respective open-source licenses (MIT, Apache 2.0, BSD, etc.). Only custom code developed by adrien.pro falls under this article.

Unless the customer purchases code ownership, they may not:

• Copy, modify, or redistribute the source code
• Reverse-engineer or decompile the software
• Assign code maintenance or evolution to third parties without prior rights transfer

⚠️ The customer retains the guaranteed right to purchase full source code ownership at any time, before, during, or years after project delivery (see Section 09).

Indemnification for Customer Content

The customer warrants that they hold all necessary intellectual property rights and authorizations for all elements provided to the service provider (text, graphics, logos, fonts, media, databases). The customer agrees to hold the service provider harmless against any third-party claims or copyright infringement actions.

The customer remains the sole and exclusive owner of all their business data. The service provider formally pledges never to exploit, monetize, or disclose such data.

07Hosting & Maintenance

By default and absent code ownership acquisition by the customer, hosting, cybersecurity, and maintenance of the solution are provided exclusively by the service provider via a fixed-rate subscription (monthly or annual).

Within this framework:

• Access to production infrastructure and server source code (SSH, SFTP, raw databases, Git repository) is strictly reserved for the service provider to ensure overall system integrity and security.
• The customer receives full administrator access to management panels and application dashboards.
• No third-party server modifications or external deployments are permitted without prior written consent.

Subscription Price Revision Clause

In the event of hosting or maintenance fee adjustments (e.g., due to infrastructure scale or inflation), the customer will be notified in writing with at least 30 days' advance notice. The customer may cancel their subscription without penalty prior to the new pricing taking effect.

Reversibility & Business Continuity Clause

The target infrastructure availability SLA is 99.5% (obligation of means).

To guarantee long-term business continuity for the customer, the service provider formally commits to a reversibility clause:

• In the event of permanent cessation of operations by the service provider, the customer will be notified at least 6 months in advance.
• In this event, the service provider will deliver the complete source code free of charge and assist with server migration.
• Continuity Plan (Unavailability): For planned temporary absences, the customer is notified in advance. For extended unavailability (> 15 business days) affecting critical operations, emergency access will be granted to retrieve data and code.

Data Export & Termination

Voluntary cancellation of the subscription suspends access. However, the customer may at any time request a free and complete export of their business data in standard formats (SQL, JSON, CSV).

Unless code ownership is purchased (see Section 09), all client data and server environments are permanently deleted 2 months after termination. If code ownership is purchased, deletion occurs immediately following confirmed transfer.

08System Security & Cybersecurity

The service provider applies a rigorous Security by Design methodology aligned with industry standards (OWASP Top 10) to safeguard application integrity, confidentiality, and performance:

1. Enhanced Authentication & Cryptography

• Robust Cryptographic Hashing (Bcrypt): User passwords are encrypted with individual cryptographic salts. No password is ever stored or accessible in plain text.
• Sensitive Data Encryption (AES-256-GCM): Critical business secrets, credentials, and administrative records are encrypted at rest using industry-standard symmetric AES-256-GCM.
• Session Protection (Secure Cookies): Authentication sessions rely on cryptographically signed JWTs transmitted via protected cookies (HttpOnly, SameSite=Lax, Secure), preventing session hijacking via malicious script injection.
• Two-Factor Signature (OTP): Contract and quote validations require single-use, time-stamped verification codes.

2. Application Defense & Data Integrity

• SQL Injection Immunity: Relational databases are queried exclusively via strongly-typed ORMs using prepared and parameterized statements, neutralizing injection vulnerabilities.
• Anti-Brute Force Shield & Rate Limiting: Intelligent request limiters actively monitor network traffic and block automated dictionary attacks and denial-of-service spam.
• Content Sanitization (Anti-XSS): All dynamic inputs and rendered markup are sanitized using certified parsers (DOMPurify) alongside strict HTTP security headers (CSP, Anti-Clickjacking, MIME protection).

3. Tier-1 Edge Infrastructure & 24/7 Monitoring Agents

• Distributed Edge Network: Applications are distributed across multi-region Tier-1 cloud architectures, providing ultra-low latency and native DDoS absorption.
• Autonomous 24/7 Monitoring Agents: Automated probes continuously track service health (pings, CPU/RAM/Disk metrics, HTTP response times). Any anomaly triggers real-time technical alerts.
• Audit Trail & Immutable Logging: Key authentication and security operations are logged to a tamper-evident audit trail for full forensic traceability.

4. Automated Backups & Disaster Recovery (RTO < 24h)

Daily automated backups (D-1) of databases and project files are performed and preserved for 30 days on geographically isolated storage, enabling rapid restoration (target RTO under 24 hours) in case of an incident.

09Transfer of Rights (Self-Hosting)

Should the customer wish to acquire full source code ownership, self-host the solution on their own infrastructure, or entrust maintenance to an internal team or third-party agency, they may exercise the code ownership transfer option.

The effective transfer (contingent on full payment) includes:

• Assignment of full proprietary exploitation, modification, and reproduction rights on the custom source code
• Delivery of a complete codebase archive or direct Git repository access
• Full database dump in standard open formats (SQL, JSON)
• Included technical onboarding and migration assistance to the customer's chosen server environment.

Following this transfer, the customer assumes full responsibility for infrastructure and maintenance. The service provider is released from all ongoing maintenance duties.

10Personal Data & GDPR

In accordance with the General Data Protection Regulation (GDPR) and applicable privacy laws:

Roles & Data Processing Agreement (DPA)

The service provider operates in two distinct capacities:

• As Data Controller: for customer administrative, invoicing, and account information (name, email, billing address).
• As Data Processor: for end-user data hosted on or processed by applications developed for the customer. The customer remains the sole Data Controller of their users. The service provider processes such data strictly on documented instructions and maintains robust security standards (standard DPA included in these terms).

Data Collected

• Account Data: first name, last name, email address, physical address, and corporate data necessary for legal invoicing.
• Technical Data: IP addresses, collected strictly for rate-limiting, audit trails, and cybersecurity defenses.

Project Messaging & AI Safeguards

To ensure optimal responsiveness and reliable audit trails, integrated ticket messaging is synchronized with a private, publisher-only server. Messages are stored immutably for verification and dispute prevention.

Additionally, the platform provides Artificial Intelligence (AI) synthesis assistants for document drafting. Users have the absolute guarantee that messages marked with spoiler tags (||) are strictly excluded and never transmitted to AI models.

Data Retention

Data Location

All server infrastructure and customer data are hosted exclusively in France or within the European Union on certified facilities adhering fully to GDPR standards.

Data Breach Notification

In the event of a verified data breach impacting personal data, the service provider commits to notifying the customer (and regulatory authorities where required) within 72 hours of discovery.

User Privacy Rights

In accordance with the GDPR, users possess rights to access, rectification, erasure, data portability, and objection. Requests can be submitted directly to contact@adrien.pro.

11Cookies & Trackers

The platform utilizes a single strictly necessary technical cookie (authentication token) required to maintain the user's logged-in session.

No third-party cookies (Google Analytics, ad pixels, third-party trackers) are used on adrien.pro.

12Project Tracking, SLA & Liability

Project Tracking & SLA Responsiveness

To ensure high transparency, the customer has access to a private dashboard featuring:

• Real-time tracking of development milestones and deliverables.
• An integrated messaging suite to centralize technical communications.
• An instant email alert system ensuring rapid response times.

The service provider targets an overall availability objective of 99.5%. In the event of a critical blocking anomaly reported via the dashboard, response is targeted within 4 business hours (obligation of means).

Limitation of Technical Liability

The service provider operates under an obligation of means for all technical services.

Liability shall not apply to malfunctions arising from external factors (telecommunications outages, force majeure cyberattacks, or improper customer account usage).

In all circumstances, the service provider's aggregate financial liability is expressly capped at the total amounts actually paid by the customer over the preceding 12 months for the affected service.

13Right of Withdrawal

Consumer Clients (B2C)

Pursuant to Article L221-18 of the French Consumer Code, individual consumers benefit from a statutory 14-day withdrawal period.

However, pursuant to Article L221-28, the customer expressly waives this right once project execution has commenced with their consent upon signing the quote.

Business Clients (B2B)

Pursuant to Article L221-3 of the French Consumer Code, no statutory right of withdrawal applies to commercial contracts executed between professionals.

14Miscellaneous, Confidentiality & Disputes

Force Majeure

Neither party shall be held liable for failure or delay resulting from force majeure pursuant to Article 1218 of the French Civil Code (including natural disasters, major telecommunications backhaul failures, or critical third-party datacenter disruptions).

Confidentiality & Commercial Reference

The service provider guarantees strict confidentiality regarding the customer's proprietary data and strategic secrets. Reciprocally, the customer commits to respecting the confidentiality of the service provider's methodologies and pricing.

Unless the customer submits a prior written objection, the service provider is authorized to feature the completed project in their portfolio (client name, logo, screenshots) as a commercial reference.

Applicable Law & Dispute Resolution

These CGV/CGU are governed exclusively by French law.

In the event of a dispute, parties agree to seek an amicable resolution prior to litigation. Consumer clients (B2C) may access approved consumer mediation services free of charge (such as the Société Médiation Professionnelle — www.mediateur-consommation-smp.fr).

Failing amicable agreement within 30 days, jurisdiction is assigned:

• To the competent courts of the consumer's domicile for consumer clients (B2C).
• To the Commercial Court of the service provider's registered office for business clients (B2B).