Privacy Policy
Last updated: 2026-04-28
1. Who we are
Creativision (the "Company", "we", "us") operates the WebDev LeadGen platform at app.creativision.fr. Contact: hello@creativision.fr.
2. What data we collect
- Account data: email, name, password hash (or Google OAuth identifier).
- Usage data: scans you run, businesses you save, outreach drafts, settings.
- Email integration data: if you connect Gmail, we store an OAuth refresh token to send messages on your behalf and poll for replies. We never read mail outside outreach threads we created.
- Public business data: name, address, rating, website status, etc. โ sourced from Google Places, recherche-entreprises (FR), GDELT, JSearch. This is not personal data about you.
- Technical data: IP address, user agent, request timestamps (for security + abuse prevention).
3. Why we process it
We process your data to (a) provide the service you signed up for, (b) send you transactional emails (account, billing, alerts you configured), (c) prevent abuse, (d) comply with legal obligations.
4. Legal basis (RGPD/GDPR)
- Contract (Art. 6.1.b): account, payments, scans you request.
- Legitimate interest (Art. 6.1.f): security logs, fraud prevention.
- Consent (Art. 6.1.a): optional analytics cookies.
5. Sharing & subprocessors
We share data with these subprocessors strictly to operate the service:
- Supabase (database + auth) โ EU region.
- Vercel (hosting) โ EU region (Frankfurt).
- Anthropic (AI text generation) โ outreach drafts only.
- Resend (transactional email).
- Google (Maps API, Gmail API if you connect it).
- RapidAPI / JSearch, Hunter.io โ only when you trigger contact/hiring lookups.
6. Retention
Account data: kept while your account is active + 12 months after deletion (legal/accounting). Scans + outreach: kept until you delete them. Server logs: 30 days.
7. Your rights (RGPD)
You have the right to access, rectify, erase, port, or restrict processing of your personal data, and to lodge a complaint with the CNIL. Email us at hello@creativision.fr.
8. International transfers
Some subprocessors (Anthropic, Vercel for backups) may process data outside the EU. They are bound by Standard Contractual Clauses approved by the European Commission.
9. Changes
We will notify you by email of any material change at least 30 days before it takes effect.