Politique de confidentialité — Constrigo

1. Data controller

This policy describes how Constrigo collects and processes the personal data of its users, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act. The data controller is the publisher of Constrigo, whose identity and contact details are set out in the legal notice.

2. Data we collect

We collect only the data strictly necessary for the service to function:

identification and account data (first name, last name, email, phone, company);
business data entered in the tool (quotes, invoices, jobsites, clients);
billing and payment data, processed through our provider Stripe;
connection and usage data (technical logs, IP address, device type).

3. Purposes and legal bases

Each processing operation is based on a defined purpose and a legal basis:

providing and administering the service — performance of the contract;
managing billing and collection — performance of the contract and legal obligation;
ensuring security and preventing fraud — legitimate interest;
sending service-related or commercial communications — legitimate interest or consent.

4. Retention periods

Account data is kept for the duration of the contractual relationship, then archived in line with legal obligations — notably ten years for accounting records and invoices. Prospecting data is kept for a maximum of three years after the last contact.

5. Recipients and processors

Data is accessible to the publisher's authorised teams and to its technical sub-processors, who are bound by confidentiality: hosting provider, payment provider (Stripe), electronic-signature service (Yousign) and email-sending tools. No data is sold to third parties.

6. Transfers outside the European Union

Data is hosted within the European Union. Where a sub-processor carries out a transfer outside the EU, it is governed by appropriate safeguards, such as the European Commission's standard contractual clauses.

7. Your rights

In accordance with the GDPR, you have the following rights over your data:

right of access and rectification;
right to erasure and to restriction of processing;
right to object to processing based on legitimate interest;
right to data portability;
right to set instructions regarding your data after your death.

These rights can be exercised by contacting us using the details given in the legal notice. Where processing is based on your consent, you may withdraw it at any time.

8. Cookies

The site uses cookies necessary for its operation and, subject to your consent, audience-measurement cookies. You can set your preferences at any time via the cookie-management banner.

9. Security

We implement appropriate technical and organisational measures — encryption of communications, access control, regular backups — to protect your data against any unauthorised access, loss or alteration.

10. Complaint to the CNIL

If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), the French supervisory authority.

11. Policy updates

This policy may be updated to reflect legal or technical changes. The date of the last update appears at the top of the page; we invite you to review it regularly.

Privacy policy