Privacy policy
Edition 1
1. What data is processed
- Member data: first and last name, email address, interface language, time zone, role in the company and whether the account is active. The password is kept only as an irreversible hash.
- Company data: name, short page address, membership status and the legal details the company has stated about itself.
- Audit records: time, kind of action, who performed it, which company it concerns, the network address of the request and a fingerprint of the browser.
- Technical logs of the platform and service cookies: the session identifier, the "remember me" marker and the chosen interface language.
The platform does not ask for data that the purposes below do not require, and does not track visits to other websites.
2. Why it is processed
- To give access to the platform and to separate rights inside a company.
- To keep sign-in safe: to limit password guessing, to confirm a change of address and to restore a password through a one-time link.
- To send email that the work requires: invitations, confirmations, event reminders and notices about requests.
- To carry requests and contracts between members and to evidence who the parties were at the moment of signing.
- To investigate incidents and disputes and to keep the platform running.
3. Retention and anonymisation
Member data is kept while the account is active. Once a member is deactivated, their name and email address are anonymised, and related records remain only to the extent the history of deals requires.
Audit records are kept for a limited time and are then anonymised: the member identifier and the network address are replaced with values that no longer identify a person, while the record itself remains for statistics and incident analysis.
Invitations and one-time links expire; the database keeps only their irreversible hash, never the link itself. Technical logs are kept briefly and are cleared automatically.
Contracts and snapshots of the parties' legal details are not anonymised: they evidence deals that took place and are kept for as long as the parties need them.
4. Member rights
- To learn what data about them is processed and to receive a copy of it.
- To correct inaccurate information about themselves and about their company.
- To ask for their data to be anonymised after leaving the community, in the part that does not concern confirmed deals.
- To opt out of email that the work of the platform does not require.
- To complain about the processing of their data and to receive an answer on the merits.
A request is submitted through the company owner or a community administrator, using the platform itself.