Privacy policy

Two roles not to be confused

Kalepio exists to collect information from your clients, so two kinds of data live side by side here, and they do not belong to the same person.

• The accounts of the professionals who use Kalepio: your name, your email address, your line of work, your subscription. We are responsible for those.
• Everything you and your clients type into your forms: contact details, answers, files, messages. That stays yours. We only host it on your behalf, and we use it for nothing else.

In practice: if one of your clients writes to us to obtain or erase their data, we pass their request on to you, because you are the one who decides. We do not open your files to answer them in your place.

What we record

• Your account: name, email address, password (never in the clear: it is hashed), and, if you turn them on, your passkeys and your second factor.
• Your workspace: its name, its public address, your logo, your colours, your line of work and the people you invite into it.
• Your work: your services, your questions, your clients, their answers, their files and yours, your messages and your notes.
• Your subscription: the formula, the period, and the identifier Stripe gives us. No card number passes through us.
• A journal of the actions taken in your workspace: who, what, when, with the IP address and the page it came from. It exists so that you can find out what happened in your own workspace, and it never contains a password or a two-factor code.

What we do not do

• We do not sell, rent or trade any data.
• We show no advertising and profile nobody for that purpose.
• We record no card number, neither yours nor your clients': paying leaves Kalepio for Stripe.
• We do not read your files. Technical access remains possible in order to fix a problem or to meet a legal obligation, and it has no other purpose.

Who we entrust something to

The bare minimum, each for a specific reason.

• The host, named in the legal notice, which runs the application.
• The storage service that keeps the files: the ones your clients upload and the ones you deliver.
• Stripe, for the subscription and for your clients' payments. Your clients pay into your own Stripe account: you are the merchant, and the money does not pass through us.
• The service that sends the emails: notifications, invitations, password resets.
• The tool that counts traffic to the site, with no cookie and no IP address.
• The service that checks that creating an account and asking for a new password come from a person rather than a robot. It receives your IP address for the length of that check.

For how long

Your data stays for as long as your account exists, because it is the material you work with: last year's brief is still how you find out what a client had asked for.

Stopping paying deletes nothing. You keep your workspace, your files and your uploads, and taking out a subscription again hands them back with nothing to redo.

Ask for your account to be deleted and we erase your workspace and its files. Anything your clients downloaded before that can obviously no longer be recalled.

Your rights

You can ask to see your data, to correct it, to take it away, to have it erased, or to object to a use of it. Write to the address given in the legal notice and we answer within the month.

If our answer does not satisfy you, you can refer the matter to the CNIL, the French data protection authority.

Cookies

What the site needs in order to work, and nothing else: no advertising trackers, and no audience-measurement cookies.

• A session cookie and a security token for the forms. The application cannot work without them.
• Three cookies that remember your preferences: the light or dark theme, the language, and whether you had collapsed the navigation column.
• A cookie that remembers your answer to the cookie notice, so it stops appearing.

The detail of each one, with how long it is kept, is in the notice shown on your first visit.

We measure traffic to the site with Simple Analytics, which sets no cookie and keeps no IP address. What is counted is the page visited, the country, the browser language, where you came from and the size of your screen: nothing that can recognise you. Since there is nothing to refuse, this measurement also counts visitors whose browser asks not to be tracked.

If this page changes

The update date at the top of the page says when the version you are reading took effect. A change that genuinely affects you will be announced by email, not only by a date quietly moving.

Legal notice

• Publisher : Auroracode, entreprise individuelle (micro-entrepreneur)
• Phone : +33 6 99 48 52 06
• Registration : SIRET 878 256 775 00031, APE 6201Z
• Responsible for publication : Thomas Drumont
• Contact : [email protected]
• Security reports : [email protected]
• Host : netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Allemagne