Privacy Policy

1. Data Controller Identification

• Company name : Utelys (SAS with share capital of €28,000)
• RCS : 842 608 671 Toulouse
• Registered office : 13 rue Saint Ursule, 31000 Toulouse, France
• Legal representative : Mr. Mounir LAKHFIF
• Contact (DPO) : privacy@utelys.fr

2. Personal Data Collected

2.1 Data collected via Trigger Flow

Client company name, first name, last name, professional email address, phone number. Payment information processed by Stripe (no direct storage of bank details).

2.2 Usage and navigation data

Google Analytics (IP addresses, pages visited, visit duration). Facebook Pixel (audience measurement and retargeting).

3. Purposes of Processing

1. Manage client accounts
2. Provide customer support
3. Handle billing and payment processing
4. Analyze audience and compile statistics
5. Comply with legal and regulatory obligations

4. Legal Basis for Processing

• Contract performance (registration, use, billing)
• Legitimate interest (audience analysis, service improvement)
• Legal obligations (accounting, taxation)

5. Data Recipients

5.1 Subprocessors and service providers

• Hosting: Digital Ocean (EU)
• Emails: Mailgun
• SMS: Gateway API
• Payment: Stripe
• Analytics: Google Analytics, Facebook Pixel

5.2 Transfers outside the EU

Appropriate safeguards are in place (European Commission Standard Contractual Clauses or equivalent).

6. Data Retention

• Account data: as long as the account is active + 3 years after last activity, then deletion/archiving.
• Billing data: 10 years (legal obligations).
• Logs and analytics: in accordance with Google Analytics settings (generally 14 months).

7. User Rights

In accordance with the GDPR and French legislation:

1. Right of access
2. Right to rectification
3. Right to erasure ("right to be forgotten")
4. Right to restriction of processing
5. Right to object
6. Right to data portability
7. Withdrawal of consent

To exercise your rights:

• Email: privacy@utelys.fr
• Mail: Utelys, 13 rue Saint Ursule, 31000 Toulouse, France

Response time: 1 month (extendable by 2 months).

Recourse: contact the supervisory authority (CNIL in France: www.cnil.fr).

8. Data Security

• HTTPS protocol to secure exchanges
• Strict access control and protected passwords
• Limitation of access rights
• Regular backups and encryption when necessary
• Notification in case of data breach

9. Cookies and Trackers

Cookies are used for:

• Proper functioning of the site
• Audience measurement (Google Analytics)
• Advertising and retargeting (Facebook Pixel)

A consent banner is displayed on first visit. You can configure cookies in your browser settings.

10. B2B Services / Minors

Services are intended for professionals (hospitality, food service). No intentional targeting of minors.

11. Policy Updates

Revisions may occur to reflect evolving practices. The last update date is visible at the top of the document.

12. Contact

Email: privacy@utelys.fr

Postal address: Utelys, 13 rue Saint Ursule, 31000 Toulouse, France