Privacy
Custodo (GAUVAIN Raphaël, sole proprietorship in the process of being registered — see our legal notice for the publisher's full identity), 9 rue des Colonnes, 75002 Paris. For any question about your personal data: [email protected].
The database (accounts, organizations, stock movements), the application, and the traffic statistics are hosted at Scaleway, on servers located in Paris (France). None of this data passes through servers outside France.
A few ancillary services, listed below, are provided by non-French third parties.
Account and organization: name, email, password (hashed), role — needed to create your account and run the application. Legal basis: contract performance.
Contact form: name, email, message — sent to Brevo (Sendinblue SAS, France) to deliver the email. Legal basis: legitimate interest in responding to your request.
Audience measurement: pages visited, referrer, device type, anonymized IP address — collected via Matomo, self-hosted by us in France (see "Cookies and audience measurement" below).
Scaleway (France): hosting of the application, database, and audience measurement tool.
Brevo (France): sending transactional emails (welcome, password reset, contact form, workflow notifications).
Cloudflare (United States): DNS resolution and anti-spam protection (Turnstile) for the contact form.
Google (United States): only if you choose to sign in with your Google account — Google then receives your email and name to authenticate you.
No data is sold or used for advertising purposes.
Account and organization data: kept for as long as you use Custodo, then deleted on request or after an extended period of inactivity.
Audience measurement data: raw data deleted after 180 days; aggregated, anonymous reports kept beyond that.
Session cookies (essential): needed to stay logged in to the application, exempt from consent.
Audience measurement (Matomo): we use Matomo, configured in line with the CNIL's audience-measurement guidelines — anonymized IP address, no cross-site identifier, cookie duration capped at 13 months, raw data deleted after 180 days. This configuration exempts Custodo from a consent banner.
You can opt out of this audience measurement at any time from our Contact page.
Under GDPR, you have the right to access, rectify, erase, object to, and port your data. To exercise it, write to [email protected].
You also have the right to lodge a complaint with the CNIL.