Privacy policy

This page is a translation provided for information only. It is not contractual: the French version prevails. Read the French version

Who is the data controller

Mandatory notice not provided

For any request about your data: Mandatory notice not provided

What we process, and on what legal basis

Account and billing

Email, encrypted password, name of the organisation. Basis: performance of the contract. Retention: the lifetime of the account, then three years.

Uploaded contracts and extracted commitments

Basis: performance of the contract. They remain yours — when the trial ends, you keep read access to everything you have uploaded.

Gap findings, evidence, timestamp and location

The location is that of the finding, not of the person: it places a service, it does not track an agent. Basis: legitimate interest in establishing proof of delivery.

Audit log

Kept for ten years. It is what makes a claim defensible, and this period cannot be shortened without destroying the evidential value of the file.

Data on listed companies

The identity of an entity, not of a person. Basis: legitimate interest. Any company can take ownership of its profile, respond to it and dispute what it contains.

What we do not do

• No buyer sees another buyer’s data. Separation is enforced at database level.
• The name of the buyer who reported a gap is never disclosed to the supplier.
• No data is sold to any advertising third party.
• We never hold your funds: your supplier pays you directly.
• No payment changes an indicator, a ranking or a finding.

Where the data lives

In the European Union. Hosting provider: Mandatory notice not provided

Your rights

Access, rectification, erasure, restriction, objection, portability. You can exercise them at the address above, and you are owed a reply within one month. You can also refer the matter to the supervisory authority of your country of residence.

Deleting an account does not delete a finding already asserted against a third party, nor the audit log that goes with it: these are items of evidence, and deleting them at the request of one party alone would deprive the other of its defence.

Trackers

The public site places no audience-measurement or advertising trackers. Only the session cookie remains, which is needed for authentication and does not require consent.