What data Facteur keeps, and for how long

Facteur is not in production yet. A passage in square brackets holds a piece of information the publisher has not declared yet: it will be filled in before launch, and we do not make it up.

Who decides how your data is used

The publisher of Facteur: [To be declared before production]. For any question about your data, write to hello@facteur.eu.

The data, depending on what you do

• You read the site. The site sets no tracking cookie. It remembers your language and your theme if you choose them, as the legal notice explains. Audience measurement is an Umami hosted by the company that publishes Facteur, with no cookie.
• You try Facteur without an account. Facteur opens a disposable address that stays active for 60 minutes and receives at most 10 messages. Those messages are deleted after one day. Facteur also keeps one journal line per action: the kind of action, the time, a fingerprint of the requester and the name of the browser. The fingerprint is computed from your IP address with a secret of the server, and the IP address itself is not kept.
• You have an account. Sign-in goes through a Logto instance reserved for Facteur, which holds your email address, your password and your second factors. Facteur keeps what concerns your organization: its members, workspaces, addresses, API keys and consumption.
• You enter an organization. When you found an organization, accept an invitation, use a join link or come back to an organization after 30 minutes without using it, Facteur keeps a trace: the moment, your IP address, the name of your browser and the country of the address. The country is read in a database copied onto the Facteur server, with no call to a third party. Only the Facteur team reads these traces, to spot abuse. No trace decides a refusal.
• Your tests send messages. Facteur stores each email it receives, with its raw file and its attachments. SMS will get the same treatment, but receiving them is not yet in service. Those messages may hold personal data of third parties. You choose what your tests send.
• You pay. Facteur computes the usage data used for billing and keeps it in its own database. The payment provider: [To be declared before production]
• The team assists you. A support session lasts one hour at most, requires a reason, is announced by a banner and is recorded in the journal. The team reads to diagnose and writes only if an owner or an administrator allows it.

How long the data is kept

• A message is deleted when the retention period of its plan ends, with its raw file and its attachments. The deletion runs every hour.
• A message of the trial without an account is deleted after one day.
• The journal of the trial without an account is kept for 12 months.
• The traces of entering an organization are kept 12 months, then deleted. They outlive the deletion of the organization and of the account.
• The data of your account is kept as long as the account exists. You delete your account and your organization from the application.

Where the data is, and who else reaches it

The application and its database are hosted at OVHcloud, on the hosting of the company that publishes Facteur. Raw messages and attachments are stored in the same place, at OVHcloud, in France. The exact location of the data center: France

The list of sub-processors says who else can reach it, and what is not chosen yet.

Data protection officer

Their appointment, or the reason none is appointed: [To be declared before production]

Your rights

You can ask for access to your data, its rectification, its erasure and its portability. Write to hello@facteur.eu, or use the support of the application if you have an account. Response time: [To be declared before production]

If you think your rights are not respected, you can complain to the data protection authority of your country.