Privacy policy

This Privacy Policy explains how we use your personal data (“information”). It applies to Information we collect about you when :

  • you are a Customer (see our “Customer Policy”)
  • you are a Prospect (see our “Prospect Policy”)

This Privacy Policy came into effect on January 1, 2022.

1. Basic information

1.1 Who we are

AppCraft is a Société par Actions Simplifiée (SAS) with its registered office at 28 rue des acacias, le Mesnil-le-Roi (78600), France, and SIREN number 818 821 597 (hereinafter referred to as “AppCraft”).

1.2 How can you contact us?

If you have any questions about the protection of your personal data, you can contact us in one of the following ways:

  • By online form: Contact form
  • By email : dpo[@]appcraft.fr
  • By post: AppCraft – Service Données Personnelles – 28 RUE DES ACACIAS – 78600 LE MESNIL-LE-ROI

2. Customer policy

This Policy explains how we process your Information when you are an AppCraft Customer.

2.1 What information do we collect about our customers?

When you are a Customer, we use different categories of Information about you, which you may provide to us yourself or which we may collect indirectly.

Category of information collected Description of information that may be collected
Identity Company name, SIREN number, address (head office, billing address); contact details (telephone, email).
Employee information Identity and contact details (telephone, email) of the collaborators with whom AppCraft teams will interact (sales, technical, events), job roles of collaborators.
Settlement / Payment Agreed payment terms and conditions, information on payment methods (bank transfer, RIB, SEPA mandate), payment history.
Sales relationship follow-up Details of service offers (options) and subscribed orders, duration of service supply. Billing. Commercial exchanges with you as part of the commercial relationship and technical support.
Outstanding payments Identity data, payment incidents (date of non-payment, invoice concerned, amount of non-payment, reason for non-payment), payment methods used.

2.2 Why do we use Customer Information and for how long?

When you are a Customer, We may use your Information for various purposes:

  • we may need it to provide you with the Services you have ordered from us (performance of a contract);
  • we may need it to meet our legal obligations (legal compliance);
  • we may have legitimate interests in using your Information (Our Legitimate Interest);
  • we may do so after obtaining your consent (Consent). You may withdraw your consent at any time.

You will find below the reasons why we process your Information (the purposes of our processing) and how long we keep your Information:

Purpose Legal basis Shelf life
Management of our commercial relationship (provision of services, technical support) Contract performance For the duration of our contractual relationship
Management of our legal, accounting and tax obligations in the context of our contractual relationship Legal compliance Retention in archive form for the legal retention period (e.g. up to 10 years for accounting purposes).
Outstanding payment management (Rescensement des impayés et exclusion de toute transaction future en cas d'impayé non régularisé) Contract performance No later than 48 hours after the unpaid amount has been settled
Claims and litigation management AppCraft's legitimate interest in establishing proof of a right or the proper performance of our contractual obligations For the duration of the statute of limitations applicable to our business relationship (e.g. up to 5 years for civil statutes of limitations).
Carry out satisfaction surveys or request opinions following an order AppCraft's legitimate interest in carrying out satisfaction surveys to gather customer feedback For 3 years
Our newsletter Consent Until you withdraw your consent
Organization of webinars / face-to-face events to promote AppCraft services AppCraft's legitimate interest in promoting its Services Up to 15 days after the organization of the last event you registered for
Prospecting for products or services similar to those already purchased by you AppCraft's legitimate interest in promoting its Services Up to 3 years from our last contact with you
You have the right to object to receiving our commercial prospecting.
Opposition list management AppCraft's legitimate interest in no longer sending prospecting to customers who have objected to it. For 3 years from the date you exercise your right to object

2.3 To whom do we disclose Customer Information?

2.3.1 To our teams

Your Information may be communicated to all our teams who need it to carry out their tasks in managing our commercial relationship. For example: our Sales team to contract with you, our Support / After-Sales team to deal with your questions or complaints, etc.

2.3.2 To our subcontractors

We use different technical service providers for different reasons:

Identity Reasons
OVH Data hosting
Google Data hosting
Google E-mail management
Google Videoconferencing
Notion Customer project management
Yourbills Billing

2.3.3 Administrative or judicial authorities

We may be required to communicate some of your Information to administrative or judicial authorities when we receive a court order.

2.4 Where do we store Customer Information?

Our main computer servers are geographically located within the European Union. Some of our technical subcontractors may host some of your Information outside the European Union.
Where this is the case, we first ensure that our subcontractors take adequate safeguards that comply with the General Data Protection Regulation (GDPR). You will find below the list of data transfers outside the European Union that may be carried out and the adequate guarantees that we take:

Recipient's identity Adequate warranties
Google European Commission standard contractual clauses
Notion European Commission standard contractual clauses

3. Prospect Policy

This Policy explains what we do with your Information when you are an AppCraft Prospect.

3.1 What information do we collect about our Prospects?

When you are a Prospect, we may use different categories of Information about you, which you may provide to us yourself or which we may collect indirectly (for example, from publicly available sources).

Category of information collected Description of information that may be collected
identity Surname, first name, business contact details (telephone, e-mail), business address
Professional situation Name of employer, position held, sector of activity
Follow-up of the prospecting relationship Prospecting activities carried out by AppCraft, requests for documentation or trials received from the prospect, direct solicitations received from the Prospect, correspondence with you, scheduling of appointments for demonstrations, etc.

3.2 Why do we use our Prospects' Information and for how long?

When you are a Prospect, We may use your Information for various purposes:

  • we may have legitimate interests in using your Information (Our Legitimate Interest);
  • we may do so after obtaining your consent (Consent). You may withdraw your consent at any time.

You will find below the reasons why we process your Information (the purposes of our processing) and how long we keep your Information:

Purpose Legal basis Shelf life
Management of our prospecting relationship (provision of our solicitations, response to your solicitations, making appointments, etc.). AppCraft's legitimate interest in developing its commercial activity Up to 3 years from last contact with you
Our newsletter Consent for 3 years from our last contact with you or until we withdraw your consent
Organization of our webinars / presnetial events to promote AppCraft's services AppCraft's legitimate interest in promoting its Services Up to 15 days after the organization of the last event you registered for
E-mail prospecting for professionals for offers related to the prospect's profession AppCraft's legitimate interest in sending commercial offers to prospects who may be interested. For 3 years from the date of our first prospection or our last exchange with you. You can oppose our prospecting operations
Prospecting by post AppCraft's legitimate interest in sending its commercial offers to prospects who may be interested. For 3 years from the date of our first prospection or our last exchange with you. You can oppose our prospecting operations
Telephone prospecting AppCraft's legitimate interest in sending its commercial offers to prospects who may be interested. For 3 years from the date of our first prospection or our last exchange with you. You can oppose our prospecting operations
Managing an ooposition list AppCraft's legitimate interest in no longer sending prospecting to persons who have objected to it. For 3 years from the date you exercise your right to object

3.3 To whom do we communicate our Prospects' Information?

3.3.1 To our teams

Your Information may be communicated to all our teams who need it to carry out their missions within the framework of the commercial management of our prospects. For example, our sales team can send you commercial solicitations, respond to your requests for documentation, and so on.

3.3.2 To our subcontractors

We use different technical service providers for different reasons:

Identity Reasons
OVH Data hosting
Google Data hosting
Google E-mail management
HubSpot Make appointments and send emails
Modjo Recording appointments with our sales teams
Lemlist Sending prospecting emails
ADN Data Prospect acquisition and segmentation
Dux-Soup Prospect acquisition and segmentation
Drop Contact Enriching prospect data
Kaspr Enriching prospect data
Waalaxy Automated email prospecting

3.4 Where do we store Customer Information?

Our main computer servers are geographically located within the European Union. Some of our technical subcontractors may host some of your Information outside the European Union. Where this is the case, we first ensure that our subcontractors take adequate safeguards that comply with the General Data Protection Regulation (GDPR).

You will find below the list of data transfers outside the European Union that may be carried out and the adequate guarantees that we take:

Recipient's identity Adequate warranties
HubSpot European Commission standard contractual clauses
Google European Commission standard contractual clauses
Notion European Commission standard contractual clauses

4. Cookies policy

4.1 Preamble

When you visit our Site as an Internet user, we may deposit or read cookies or tracers on your terminal.

4.2 What is a cookie?

A cookie is a small file placed or read on your terminal (computer, tablet, smartphone). They are used to store information on your terminal in connection with your browsing on our Site. Reading and depositing cookies generally requires your consent; however, some so-called technical cookies may be deposited without your consent.

4.3 What types of cookies do you use?

We use different types of cookies:

Cookie category Forunisseur Purpose
Technical cookies Tarteaucitron Reccueilli vos choix concernant les cookies
Audience measurement cookies Google Analytics Audience measurement services are used to generate visitor statistics, which are useful for improving the site.
Audience measurement cookies Google tag Manager Audience measurement services are used to generate visitor statistics, which are useful for improving the site.
Video platform cookies Vimeo Video-sharing services enrich your site with multimedia content and increase its visibility

Information collected via audience measurement cookies is kept for a maximum of twenty-five months.

4.5 How can I withdraw my consent?

You can withdraw your consent at any time by configuring it on our cookie manager accessible here :

5. Information applicable to all our Policies

5.1 What are your rights?

Personal data protection regulations give you several rights:

Right of access HYou can ask us to access all the information we hold about you.
Right of rectification You can ask us to correct your information if it is inaccurate.
Right to object You can ask us to stop using your information when we do so for a legitimate interest.
You can also ask us to stop receiving commercial prospecting.
Right to withdraw your consent Where any of our processing operations is based on your prior consent, you may withdraw your consent at any time. We will then stop using your information for this treatment.
Right to erasure You can ask us to delete your information and stop using it.
Right to limitation You may ask us to temporarily stop using your information, but you may also request that we temporarily retain it.
Right to portability You can ask us to provide you with an export of your information in a reusable format and, where possible, ask us to pass it on to another organization that can use it.
Right not to be the subject of an automated individual decision You have the right not to be subject to a decision based exclusively on automated processing that produces legal effects concerning you or significantly affects you.
The right to define directives concerning your estate in the event of death You have the right to define, update or revoke directives concerning the conservation, deletion or communication of your information after your death.
Right to lodge a complaint You can lodge a complaint with the authority responsible for protecting personal data (in France, the CNIL, www.fr) if you feel that your rights have not been respected.

5.2 How to exercise your rights

To exercise your rights, please contact us using the details given in the “How to contact us” section.

We will do our best to get back to you within one month.
The rights you can exercise are defined by the RGPD and depend on the legal basis of our processing. It may therefore happen that we cannot accept a request to exercise rights because the right invoked cannot be exercised. If so, we’ll let you know.

We may also ask you for proof of identity to ensure that it is you who are exercising your rights and when we have no other means of ensuring this. You only need to send us proof of identity if we ask for it.