Privacy policy

1. Data controller

The data controller is the publisher of the Service, identified in the legal notice. Contact: [contact e-mail address].

2. Data we collect

Account data: name, e-mail address, company, password (hashed). Usage data: technical and audit logs (IP address, timestamps, actions). Billing data: processed by Stripe — Erganos never stores card numbers.

Data the Customer entrusts to the AI employees as part of the Service: their customers' invoices and contact details, e-mails received in their support mailbox, SMS and calls from their correspondents, social media content and statistics.

3. Purposes and legal bases

Providing the Service and managing the account: performance of the contract. Billing and accounting: legal obligation. Security, abuse prevention and audit logs: legitimate interest. Business prospecting: legitimate interest, with the right to object at any time without giving reasons.

4. Recipients and processors

Data is processed by Erganos and, strictly for the needs of the Service, by: OVHcloud (hosting, European Union), Stripe (payments), Resend (e-mail delivery), Twilio (SMS sending and receiving), Anthropic (AI text generation), and the social platforms the Customer chooses to connect (Meta, LinkedIn). No data is sold to third parties.

5. Retention periods

Account data: duration of the contract, then limited archiving for legal obligations (invoicing: 10 years). Technical logs: 12 months. Data entrusted to the AI employees: duration of the contract; deleted upon account closure.

6. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection. To exercise them: [contact e-mail address]. You may also lodge a complaint with the CNIL (cnil.fr).

7. Transfers outside the European Union

Some processors (Stripe, Twilio, Anthropic) may process data outside the European Union. Such transfers are governed by appropriate safeguards, in particular the European Commission's standard contractual clauses.

8. Cookies

The Site only uses cookies strictly necessary for its operation (login session, security). No advertising cookies or third-party trackers are set; such cookies are exempt from consent.

9. Security

Erganos implements appropriate technical and organisational measures: encrypted transport (TLS), encryption at rest for access tokens, password hashing, strict per-organisation data isolation, audit logs.