This translation is provided for information only. Only the French version is binding. Read the French version
Version 2 In force since October 11, 2026
This English version of the privacy policy is a translation provided for information purposes only. Only the French version is binding; in the event of any discrepancy, the French version prevails.
This privacy policy informs visitors to the Easioo site, Easioo's professional clients, their representatives and their users, and any person in contact with Easioo, of how their personal data are processed, in accordance with Regulation (EU) 2016/679 (the "GDPR") and French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties.
Capitalised terms have the meaning given to them in Easioo's terms of use (the "Terms of Use").
The controller is EASIOO, a French simplified joint-stock company (société par actions simplifiée) with a share capital of 3,000 euros, registered with the Lyon Trade and Companies Register under number 107 391 161, whose registered office is at 271 rue des Plantières, 69380 Chasselay, France ("Easioo").
For any question about your data or to exercise your rights: contact@easioo.com, or by post to the registered office.
Data protection officer: Florian COMTE (florian.comte@easioo.com)
2.1. This policy describes the processing for which Easioo acts as controller: management of accounts, of the commercial relationship, of subscriptions, payments and invoicing, security of the service, communications, responses to requests and compliance with legal obligations.
2.2. Where a professional client provides the service with information about other persons - for example its managers, employees, customers or partners, the persons appearing in its photographs or videos, or the information published on its website - that client is the controller of those data and Easioo acts as processor, on its behalf and on its instructions, under the conditions of article 18 of the Terms of Use. Data subjects are invited to contact the client concerned first. Easioo forwards to that client the requests it receives.
2.3. Where a client connects a social network account and has content published, the platform concerned (Meta for Facebook and Instagram, LinkedIn) processes the data transmitted to it under its own responsibility, in accordance with its own privacy policy.
| Category | Data |
|---|---|
| Identification and account | First name, last name, email address, cryptographic hash of the password, language, country of establishment, SIRET number or VAT number, email address verification status, date of last activity, notification preferences |
| Connection and security | Sessions, IP address and browser information associated with the sessions, connection dates and times, technical and security logs |
| Contractual evidence | Documents accepted, versions, digital fingerprints, text of the declaration accepted, date and time of acceptance; records of post approvals |
| Billing and payment | Company name, professional identifier, VAT number, tax code where applicable, address, first and last name of the contact person, billing email address, plan, payment history, invoices, result of the VAT number check; technical card references transmitted by the payment provider, brand, last four digits, expiry date and cardholder name |
| Use of the service | Information about the company, exchanges with Léa, analyses, plans, calendars, posts, media and their technical copies, social network connection data (identifiers and names of the pages or accounts, authorisations granted, encrypted access tokens, references of the posts) |
| Artificial intelligence processing | Usage and consumption data (model used, volume, cost); the content of requests and responses is not kept by the technical intermediation service |
| Communications | Emails exchanged with Easioo, records of notifications sent |
Full card numbers and security codes are entered exclusively on the payment provider's secure page. Easioo has no access to them and does not keep them.
| Purpose | Legal basis |
|---|---|
| Creation and management of the account, provision of the service, support | Performance of the contract or pre-contractual measures; Easioo's legitimate interest in managing the relationship with the users designated by its clients |
| Verification of the client's professional status | Performance of the contract; Easioo's legitimate interest in reserving its service for professionals |
| Management of subscriptions, payments, invoicing and debt collection | Performance of the contract; legal accounting and tax obligations |
| Verification of intra-community VAT numbers | Legal obligation; Easioo's legitimate interest in applying the appropriate VAT regime |
| Retention of evidence of acceptance, approval and payment | Easioo's legitimate interest in establishing the existence and performance of the contract and defending its rights |
| Security of the service, prevention and detection of fraud, abuse and payment disputes | Easioo's legitimate interest in protecting its service, its clients and its financial interests |
| Sending messages about the account, security, the subscription, payments and invoices | Performance of the contract |
| Sending notifications about activity in the service (reminders, posts ready, confirmations, feedback requests) | Easioo's legitimate interest in encouraging the use of the service; these notifications can be switched off at any time from the client area |
| Handling content reports and complaints | Legal obligation; Easioo's legitimate interest |
| Responding to requests sent by email | Pre-contractual measures or Easioo's legitimate interest in responding to the requests sent to it |
| Improving the service by means of anonymised statistics | Easioo's legitimate interest in improving its service |
| Establishment, exercise and defence of legal claims | Easioo's legitimate interest |
| Responding to requests from the authorities | Legal obligation |
The information marked as mandatory at registration or when ordering is necessary for the conclusion and performance of the contract. Without it, the account cannot be created or the order cannot be placed.
4.1. Where the client provides the address of its website, the service collects the publicly accessible pages, documents and logo of that site in order to analyse the company's activity. These items may contain data about persons appearing on that site. This processing is carried out on behalf of the client, under the conditions of article 2.2.
4.2. Where the client connects a social network account, Easioo receives from the platform concerned the identifiers and names of the authorised pages or accounts, the authorisations granted and the corresponding access tokens.
4.3. When a payment is made, Easioo receives from the payment provider the result of the transaction and the technical references of the card.
4.4. When an intra-community VAT number is checked, Easioo receives the result of that check from the European Commission's VAT information exchange system.
5.1. The assistant Léa relies on artificial intelligence models run by Scaleway, as Easioo's processor. The information necessary for the action requested - in particular the information about the company, extracts from the website, the history of exchanges, the plans, the texts and the media - is transmitted to these models to produce the responses and content.
5.2. The technical intermediation service operated on behalf of Easioo between the service and the models does not record the content of requests or responses. It keeps only usage data (model used, volume, cost), for supervision, security and consumption monitoring purposes, for the period stated in article 8. The exchanges with Léa remain stored in the service, with the other account data, so that they can be displayed to the client.
5.3. Easioo does not use its clients' content to train artificial intelligence models.
5.4. No decision producing legal effects or significantly affecting you is taken solely on the basis of automated processing within the meaning of article 22 of the GDPR. The content produced by Léa consists of proposals; the decision to publish it rests with the client.
Your data are accessible only to Easioo's authorised personnel, within the limits of their duties. They may be disclosed to the following recipients, solely for the purposes described above:
| Recipient | Role | Location |
|---|---|---|
| Scaleway, SAS, 8 rue de la Ville-l'Évêque, 75008 Paris, France | Hosting of the site, the application, the databases and the files | European Union |
| Scaleway, SAS, 8 rue de la Ville-l'Évêque, 75008 Paris, France | Running the artificial intelligence models | European Union |
| Infomaniak Network SA, rue Eugène-Marziano 25, 1227 Les Acacias (Geneva), Switzerland | Sending emails | Switzerland (European Commission adequacy decision) |
| Scaleway, SAS, 8 rue de la Ville-l'Évêque, 75008 Paris, France | Storage of backups | European Union |
| Axepta BNP Paribas | Processing of card payments | European Union |
| European Commission (VAT information exchange system) | Verification of intra-community VAT numbers | European Union |
| Meta Platforms Ireland Limited and LinkedIn Ireland Unlimited Company | Receipt of authorisations and posts, on the client's instructions, as separate controllers | Ireland, and any country determined by these companies |
| Advisers, statutory auditors, chartered accountants, insurers, debt collection companies | Accounting management, defence of rights, debt collection | As the case may be |
| Administrative and judicial authorities | Responding to legally founded requests | As the case may be |
The providers listed above, in particular Scaleway and the payment provider, act on behalf of Easioo, on its instructions and under a contract compliant with article 28 of the GDPR. They may nevertheless keep, for their own account or to meet their legal obligations, certain technical or transaction data (operating and security logs, billing and fraud-prevention data, transaction data and the technical references of the card), as a separate controller for that data only and for their own retention periods. Easioo does not control those periods; you can consult them in each provider's privacy policy.
Easioo does not sell your data and does not use them for advertising purposes. Easioo may disclose your data to an acquirer or successor in the context of a merger, acquisition or transfer of all or part of its business.
7.1. Where data are transferred by Easioo or its processors to a country outside the European Economic Area, the transfer is governed by an adequacy decision of the European Commission or, failing that, by standard contractual clauses adopted by the European Commission, supplemented where necessary by additional measures. You may obtain a copy of the applicable safeguards by writing to contact@easioo.com.
7.2. The social network platforms to which the client sends its posts may process and transfer the data, in particular to the United States, under their own responsibility and according to their own safeguards. A post published on a social network may be viewed from any country.
| Data | Retention period |
|---|---|
| Account data and service usage data | For the term of the contract, then for the period provided for in article 25.5 of the Terms of Use; immediate deletion if the client deletes the account, subject to the following lines |
| Login sessions | Valid for seven days from the last refresh; expired sessions are deleted within twenty-four hours of their expiry |
| Verification and password reset links | Valid for one hour |
| Social network connection data | Until the social account is disconnected or the account is deleted; data relating to unfinished authorisations: deleted within twenty-four hours of their expiry |
| Technical card references | For the term of the subscription in Easioo's databases; the references of a replaced card are not kept. The payment provider keeps them under its own obligations (section 6) |
| Invoices, accounting documents and related payment data | Ten years from the end of the financial year concerned |
| Evidence of acceptance of the terms relating to a paid subscription | For the same period as the corresponding invoices |
| Other evidence of acceptance | For the life of the account, then five years from its deletion, in a restricted-access archive, solely for the establishment, exercise or defence of Easioo's legal claims |
| Evidence of post approvals | For the life of the account, then five years from its deletion, in a restricted-access archive, solely for the establishment, exercise or defence of Easioo's legal claims |
| Logs of requests to and responses from the artificial intelligence models | The content of requests and responses is not kept in these logs; the associated usage data (model, volume, cost) are kept for twelve months at most |
| Records of notifications sent | Thirteen months from sending; ten years for notifications relating to invoicing and payment, kept with the corresponding invoices |
| Technical and security logs | Twelve months at most |
| Emails sent to Easioo | For the term of the contract, then five years at most from its end |
| Data relating to a report or a complaint | For the time needed to handle the report or complaint and, where applicable, until the time limits for appeal have expired |
| Data necessary for a dispute | For the duration of the dispute and until the means of appeal have been exhausted |
| Backups | Daily backup, retained for fourteen days, then deleted during the technical purge cycle |
Access to backups is restricted to authorised persons. Additional recovery copies may be created; when created, they are encrypted and protected against modification and deletion throughout their retention period. A technical erasure journal containing pseudonymised identifiers is retained for thirty-five days, then deleted during the technical purge cycle, to reapply deletions after a restore; it is used only for that purpose.
Data deleted from the active database may remain in backups until the end of their rotation cycle. They are not used for any other purpose and, in the event of a restore, the deletions are applied again.
On expiry of the above periods, the data are deleted or anonymised.
The periods stated in this section apply to the data kept by Easioo. Deleting data in the service is passed on to the providers that host it on behalf of Easioo; it may remain in their backups until the end of their rotation cycle and, for the provider-specific data described in section 6, for the periods set by that provider.
9.1. Easioo uses only cookies and trackers that are strictly necessary for the operation of the service, which are exempt from consent in accordance with article 82 of French Law No. 78-17 of 6 January 1978:
| Tracker | Purpose | Duration |
|---|---|---|
| Authentication cookies | Maintaining the signed-in user's session and securing authentication | Seven days at most from the last refresh of the session |
| `oauth_return` | Returning the user to the right page after connecting a social network account | Ten minutes |
9.2. Easioo uses no advertising cookies, no audience measurement tool and no social network tracker on its site. No consent banner is therefore displayed.
9.3. When you are redirected to a social network's site or to the payment provider's secure payment page, those sites set their own trackers, under their responsibility and according to their own policies.
9.4. You can set your browser to refuse cookies. Refusing strictly necessary cookies prevents signing in to the service.
Easioo implements appropriate technical and organisational measures to protect your data against unauthorised destruction, loss, alteration, disclosure or access, in particular verification of the email address, encryption of communications, encryption of social network access tokens, separation of data between clients and restriction of access. As no system is perfectly secure, you contribute to this security by protecting your credentials.
11.1. You have the right of access, rectification, erasure, restriction of processing, the right to data portability and the right to object to processing based on legitimate interest, on grounds relating to your particular situation. You may also set out instructions regarding what happens to your data after your death.
11.2. You can change your information and your notification preferences and delete your account from your client area. To obtain a copy of your data or exercise your other rights, write to contact@easioo.com. Easioo may ask you to prove your identity in the event of reasonable doubt.
11.3. Easioo responds within one month of receiving the request. This period may be extended by two months given the complexity or number of requests; you will then be informed.
11.4. Some rights may be limited where the retention of the data is required by law or necessary for the establishment, exercise or defence of legal claims. Erasure of data does not delete posts already published on social networks, which must be deleted directly on those platforms.
11.5. You may lodge a complaint with the French data protection authority (Commission nationale de l'informatique et des libertés, CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr, or with the supervisory authority of the Member State of your habitual residence or place of work.
Easioo may change this policy, in particular to take account of changes to the service or to regulations. The version in force is the one published on the site, with its effective date. Any substantial change is brought to the attention of clients by email or in the service.
