Your data, and what we do with it.

1. Who processes your data

The data controller is LIMPETX, a French simplified joint-stock company (société par actions simplifiée) with share capital of €1,000, at 164 boulevard Gustave Rambert, 13190 Allauch, SIREN 106 482 235, registered with the Marseille Trade and Companies Register, represented by Mr Jimmy Wizenne, President.

LIMPETX has two roles:

- Data controller for the data of website visitors, people who contact us, application users (accounts and sign-in), and billing data.

- Data processor for the business data our customers upload to LIMPETX (see section 3).

For any questions about your data: contact@limpetx.com. LIMPETX has not appointed a data protection officer (DPO).

2. Data collected, why, and for how long

We collect only what is needed to provide the service. We do not sell any data.

Contact or demonstration request — Data: name, company, email, phone number (optional), trade, message. Purpose: to answer your request. Legal basis: steps taken at your request before entering into a contract. Retention period: 12 months, then deletion.

Registration and account — Data: email, Organisation name, password (hashed with Argon2id, never stored in plain text). Purpose: to create and manage your access. Legal basis: performance of the contract. Retention period: the duration of the contract, then 3 years.

Inviting a colleague — Data: the invited person's email address. Purpose: to give them access. Legal basis: performance of the contract. Retention period: invitation link valid for 7 days; account: as above.

Sign-in — Data: a fingerprint of the IP address (not the address itself), browser type. Purpose: to secure sessions and limit attempts. Legal basis: legitimate interest (security). Retention period: session: 8 hours; sign-in history: 12 months.

Billing — Data: email, billing address, VAT number, payment card (entered and stored only by Stripe). Purpose: to collect subscription payments and issue invoices. Legal basis: contract and legal obligation. Retention period: accounting records: 10 years (French Commercial Code).

Administration log — Data: who performed sensitive actions, when, and why. Purpose: to track operations and prevent abuse. Legal basis: legitimate interest. Retention period: 3 years.

Copilot (AI) — Data: questions, answers, attachments. Purpose: to answer your questions about your figures. Legal basis: performance of the contract. Retention period: unsent attachment: 24 hours; conversations: the duration of the contract, then deletion with the customer's data.

Website audience measurement — Data: see section 6. Purpose: to improve the website. Legal basis: your consent. Retention period: 180 days.

No decision concerning you is made in a fully automated way: LIMPETX and its Copilot make recommendations; the decision remains yours.

3. Our customers' business data

The data our customers upload to LIMPETX (invoices, expenses, job sites, names of their own customers, imported files) belongs to them. For this data, the customer is the data controller and LIMPETX is the data processor within the meaning of the GDPR.

- LIMPETX processes this data only to provide the service, according to the customer's instructions and the general terms and conditions of sale.

- Each Organisation can see only its own data: separation is enforced down to the database level.

- At the end of the contract, the customer's administrator can export their data for 30 days. It is then deleted, unless there is a legal retention obligation (for example, LIMPETX invoices) or an ongoing dispute.

4. Who receives your data

Your data is shared only with the providers listed below, and only as necessary to provide the service.

Hetzner Online GmbH — Role: hosting the application, database, and imported files. Data concerned: all application data. Location: European Union.

Cloudflare, Inc. — Role: domain name resolution, website protection, and sending automated emails (invitations, forgotten passwords, reminders). Data concerned: connection IP address, recipient's email address, and email content. Location: United States and worldwide.

Stripe — Role: payments and billing. Data concerned: email, billing address, VAT number, payment card. Location: European Union and United States.

OpenAI — Role: the Copilot's artificial intelligence features (see section 5). Data concerned: questions, answers, figures needed for the answer, attachments. Location: United States.

OVHcloud — Role: LIMPETX email service (contact@, support@, facturation@). Data concerned: emails you send us. Location: France.

Cloudflare Email Sending — Role: transmitting contact form requests. Data concerned: form data. Location: United States.

Calendly — Role: appointment scheduling when you open the external calendar. Data concerned: information you enter to book your demonstration. Location: as stated in Calendly's privacy policy.

Google (Google Analytics) — Role: website audience measurement, only if you accept it. Data concerned: browsing data. Location: United States.

Transfers outside the European Union. Some providers are located in the United States. These transfers are governed by the EU–US Data Privacy Framework and/or the European Commission's standard contractual clauses.

5. Artificial intelligence (Copilot)

When you ask the Copilot a question, LIMPETX sends OpenAI the minimum information needed to answer it:

- your question and the beginning of the conversation;

- the figures already calculated by LIMPETX that are needed for the answer, and the names they contain (for example, the name of a job site or customer);

- the attachments you add;

- if you request read-aloud playback, the text of the answer.

LIMPETX disables storage of Responses API responses using the “store: false” setting. This setting does not, by itself, remove OpenAI's abuse monitoring logs: these may contain data and are retained by default for up to 30 days, or longer for legal obligations or to protect the service. By default, data sent through the OpenAI API is not used to train its models, unless data sharing has been explicitly accepted.

The Copilot explains and recommends. It makes no decisions and never acts on your behalf.

6. Cookies and trackers

The application uses only cookies necessary for it to function. On the website, audience measurement is enabled only if you accept it, and you can withdraw your choice at any time through “Cookies and privacy” at the bottom of the page. No advertising trackers are used.

lx_session — Where: application. Role: to keep you signed in. Duration: 8 hours. Consent: not required (necessary).

lx_csrf — Where: application. Role: to protect forms against attacks. Duration: 8 hours. Consent: not required (necessary).

__Host-lx_acquisition (and variants) — Where: registration. Role: to link your Stripe payment to your account activation. Duration: 1 hour. Consent: not required (necessary).

limpetx_payload-token — Where: LIMPETX back office. Role: LIMPETX administrator session. Duration: the duration of the session. Consent: not required (necessary).

limpetx:privacy-choice — Where: website (browser storage). Role: to remember your audience measurement choice. Duration: 180 days. Consent: not required (necessary).

_ga, *ga*\* — Where: website (Google Analytics). Role: audience measurement, without advertising or Google signals. Duration: 180 days. Consent: required.

You can change your choice at any time using the “Cookies and privacy” link.

7. Security, your rights, and changes

Security. Encrypted connections (HTTPS), passwords stored as Argon2id hashes, each Organisation's data separated in the database, database inaccessible from the Internet, and forms protected against automated submissions.

Your rights. You may request access to your data, its correction or deletion, restriction of its processing, object to processing based on legitimate interest, and receive your data in a reusable format. You may also withdraw your consent at any time, without affecting processing already carried out.

To exercise these rights, write to contact@limpetx.com. We respond within one month. For business data uploaded by a customer company, contact that company first.

Complaints. If you believe your rights are not being respected, you may lodge a complaint with the CNIL (www.cnil.fr).

Changes. This policy may change. Each version is dated and retained; the date of the current version appears at the top of the page.