Privacy Policy
Last updated: 2025 April 1st
1. Data Controller
CRBO SAS (SIRET: 9823099570001), located at 4 rue de l'ancien four - 01130 PLAGNE, is the data controller for personal information collected through our services.
2. Data We Collect
- Contact Information: Name, email address, phone number
- Payment Details: Transaction records (excluding credit card information)
- Calendar Data: Event details for synchronization with Google Calendar
- Technical Data: IP addresses, device information, and usage data
3. Legal Basis & Purposes
We process data based on:
- Contractual necessity for service delivery
- Legitimate interest for service improvement
- Legal compliance with French and EU regulations
Dashboard analytics use pseudonymized data sets following GDPR Article 6(1)(f) requirements.
4. Third-Party Sharing
We share data with:
- Payment processors (Stripe/PayPal) for transaction processing
- Google Calendar API for schedule synchronization
- Legal authorities when required by law
5. Data Retention
We retain personal data:
- Active users: 3 years from last activity
- Financial records: 7 years for tax compliance
- Calendar data: Until user revocation
6. Your Rights
Under GDPR, you have rights to:
- Access and portability - Download your data directly from dashboard settings
- Rectification and erasure - Update/delete records through profile controls
- Restriction of processing
- Object to processing
7. Security Measures
We implement technical safeguards including encryption, access controls, and regular security audits.
8. Contact Us
For data requests or concerns:
Romain BOURDY
Email: romain@crbo.dev
Policy version: 1.0
Effective date: 2025 April 1st
See our Terms of Service for service terms and conditions.