Privacy policy

Introduction

This privacy policy explains how Ancrale processes your personal data when you use the Ancrale service (app.ancrale.fr), visit the www.ancrale.fr website or write to us. Ancrale limits the data it processes to what is strictly necessary.

It first describes the service, then the www.ancrale.fr website; the recipients, your rights and how to contact us are common to both.

Data controller

The data controller is Ancrale, a simplified joint-stock company (SAS), whose registered office is at 61 rue de Lyon, 75012 Paris. You can contact us at any time at the following address: dpo@ancrale.fr.

Ancrale is the controller of the processing described in this policy, in particular for the accounts, invoicing, security and support of the Ancrale service, for the www.ancrale.fr website and for the correspondence sent to it. For the documents and text processed in the service, the customer that subscribes to the service is their controller, or itself acts on behalf of its own controller, and Ancrale acts as processor, under the data processing agreement (DPA) annexed to the terms of sale, which this policy does not repeat.

Ancrale has not appointed a data protection officer: this address is our contact for any question about your data.

The Ancrale service (app.ancrale.fr)

This part concerns the users of the Ancrale service, available at app.ancrale.fr or at any other address given to the customer, and the people who write to us about it or report content to us. When your organisation invites you to use the service, your name and e-mail address are given to us by the person who manages its account.

Your documents

For the documents you upload and the text you type in the service, Ancrale acts as the customer's processor, under the DPA: the customer is their controller, and any question about this data should be addressed to it. These documents and this text are processed in France and erased automatically, no later than 24 hours after upload or typing; the erasure delays in force, which are shorter, are published on the Sovereignty page.

No one at Ancrale accesses their content, except at the customer's explicit support request or under a legal obligation. They are never used to train or improve an artificial intelligence model, and no third-party artificial intelligence service processes them.

Account and organisation

Data: your surname, first name, e-mail address and role; for the organisation, the customer's company name and French company number (SIREN) or intra-EU VAT number, its settings, the list of its users, the history of tasks (metadata, without content) and quota usage.
Purpose: creating and managing your account and the organisation, providing the service and applying the quotas of the plan subscribed to.
Legal basis: performance of the contract where you are yourself the customer, as a sole trader; otherwise, our legitimate interest in providing the customer with the service it subscribed to and in managing the accounts of the users it designates. This data is required: without it, the account cannot be created.
Retention: your account, until the customer removes your access, then 30 days; the history of tasks, 365 days from each task; the organisation's other data, the term of the contract. At the end of the contract, this data is erased as described in the "End of the contract" section.

Your favourite tools are also stored with your account, so that they are offered to you on each of your devices; they are kept and erased with it.

The e-mails the service sends you are sent through Scaleway SAS, in France; they carry no open or click tracking.

Sign-in and sessions

Data: your e-mail address, the single-use sign-in codes sent to that address, the IP address and the information sent by your browser at each sign-in, the security events of your sign-ins (code requested, wrong code, lock, sign-out), recorded under a pseudonymised identifier, information about your open sessions and, when you sign in by code from a browser, an identifier that lets the service recognise that browser when you next sign in.
Purpose: authenticating you, keeping you signed in and securing access to the service, through an authentication service that Ancrale runs itself on the service's infrastructure.
Legal basis: performance of the contract where you are yourself the customer and, otherwise, our legitimate interest in providing the service to the customer; in all cases, our legitimate interest in securing the service.
Retention: your e-mail address, for as long as your account exists; a sign-in code, 10 minutes; a session, 7 days, extended while you stay active, and closed when you sign out; a recognised browser, 90 days after your last sign-in by code, or until you ask to be signed out of all your devices; the identifier that ties your browser to the authentication service, 1 year; the security events of your sign-ins, 1 year; the IP address and browser information of each sign-in, 1 year.

Audit trail

Data: the technical metadata of each task: tool, date and time, cryptographic fingerprints, erasure method and pseudonymised identifier of the user, never the content or the name of the documents.
Purpose: securing the service, proving that tasks were carried out and documents erased, and defending our rights in legal proceedings.
Legal basis: our legitimate interest in securing the service and in being able to prove that it works as described.
Retention: 365 days from each task; at the end of the contract, the audit trail is erased with the customer's other data (see "End of the contract"), even if that period has not elapsed.

Access logs of the service

Data: for each request to the service, the date and time, the method, the address (URL) requested, without its parameters, and the response code.
Purpose: securing the service, detecting abuse and attacks and keeping evidence of them.
Legal basis: our legitimate interest in securing the service.
Retention: 1 year. These logs, which are Ancrale's security data, are kept for that period even after the contract ends.

Activation events

Data: a pseudonymised identifier of the user, their organisation, the date and time, the onboarding step reached (first sign-in, first task started, first task completed, first export of their data) and, where applicable, technical data about that step, without any content.
Purpose: understanding how users get started with the service, in order to improve it.
Legal basis: our legitimate interest in improving the service.
Retention: 365 days; at the end of the contract, they are erased with the customer's other data (see "End of the contract"), even if that period has not elapsed.

Billing and invoices

Data: the customer's company name, French company number (SIREN) or intra-EU VAT number and billing address, the name and e-mail address of the person who pays, the plan subscribed to, the number of users, the amounts, the payment currency, the VAT applied and the history of payments, invoices and receipts; for the payment card, its brand, issuing country, last four digits and expiry date, and the risk level Stripe assigns to the payment. Ancrale neither receives nor stores the full card number or its security code.
Purpose: managing the subscription (subscribing, number of users, renewal, termination), collecting the subscription price, checking payments and preventing fraud, recovering unpaid sums and handling payment disputes, computing the applicable VAT, issuing and sending invoices and receipts, and keeping our accounts.
Legal basis: our legal accounting and tax obligations and, for the rest, performance of the contract where you are yourself the customer or, otherwise, our legitimate interest in managing the customer's subscription, collecting its price, preventing fraud, recovering sums due and handling payment disputes. This data is required by law and by the contract: without it, the subscription can be neither taken out nor invoiced.
Retention: invoices, receipts, the payment history and other accounting records, 10 years from the end of the financial year (Article L. 123-22 of the French Commercial Code); other billing data, the term of the contract, then the erasure described in the "End of the contract" section.

Payment for plans subscribed to online takes place on pages hosted by our payment provider, Stripe Payments Europe, Limited (Ireland). You enter your card details there directly; Ancrale receives neither the full card number nor its security code. Stripe also receives the name and e-mail address of the person who pays, the customer's company name, billing address and, where given, intra-EU VAT number, the plan, the number of users and the amounts, and collects on its pages information about your connection and device, including your IP address. On Ancrale's behalf, Stripe manages the subscription, computes VAT, issues invoices and receipts and sends them to you by e-mail. For carrying out the payment, preventing fraud, in particular through an automated analysis of the payment that may lead to its refusal, and complying with its own legal obligations, Stripe acts as a separate controller; it describes this processing and how to exercise your rights with it in its privacy policy (opens in a new window). If you pay with a payment wallet, such as Apple Pay, its provider also processes the payment, under the terms and privacy policy that bind you to it.

VAT is computed from the billing address and, where given, the intra-EU VAT number. Prices are set in euros; if you pay from a country whose currency is not the euro, Stripe's payment page may offer to let you pay in your own currency, which it infers from your location, estimated from your IP address, for an amount it shows before payment, calculated at an exchange rate that includes a conversion fee; invoices remain in euros.

Quotes and invoices for the Integral plan are issued through our e-invoicing platform, Indy (France). Neither Stripe nor Indy receives the documents you process in the service.

Support and exit requests

Data: your e-mail address, your name, the content of your request and our exchanges.
Purpose: answering support requests and handling the requests for export, switching provider or erasure provided for in the terms of sale.
Legal basis: performance of the contract where you are yourself the customer or, otherwise, our legitimate interest in assisting the customer and its users; for switching provider, transferring and erasing the data, our legal obligations (Regulation (EU) 2023/2854 on data).
Retention: 3 years after our last exchange.

Acceptance log

Data: for plans subscribed to online, Stripe's record of the acceptance of the terms during the payment session, with the date and time of payment, a copy of which Ancrale keeps, and the version of the terms in force on that date, archived by Ancrale; for a change to the terms (Article 18 of the Terms of Sale), the notice sent to the customer, its date and the version notified and, where the change requires express acceptance, the e-mail that gives it, its author and its date; for the Integral plan, the signed quote and the identity of its signatory.
Purpose: proving acceptance of the terms of use, the terms of sale and the DPA.
Legal basis: our legitimate interest in being able to prove that the contract was entered into. This record is a condition of subscribing: without acceptance of the terms, the payment cannot be confirmed.
Retention: the term of the contract, then 5 years (the ordinary limitation period).

Reports of illegal content

Data: the name and e-mail address of the person reporting, the content of the report, the information on the account, organisation or use reported, which the person reporting gives us, our exchanges, our decision and, where applicable, the statement of reasons sent to the user or customer concerned.
Purpose: examining the report, taking the measures provided for in the terms and giving reasons for them, informing the person reporting of our decision and of the available remedies, handling any challenge and, where information gives rise to a suspicion of a criminal offence that threatens the life or safety of persons, informing the competent authorities.
Legal basis: our legitimate interest in preventing and stopping illegal use of the service, by handling reports as provided for in Article 16 of Regulation (EU) 2022/2065 on digital services.
Retention: 1 year after our decision.

The procedure is described on the Report illegal content page.

End of the contract

At the end of the contract or of the free trial, whatever the cause, and at the end of any transition period, the customer has a retrieval period of 30 days during which it may obtain an export of its exportable data free of charge. At the end of that period, Ancrale erases the customer's data, including the audit trail, within 30 days, then the backup copies within the following 7 days.

Backups cover only account and billing data, never documents. The following are not erased at the end of the contract and are kept for the periods given above, as data Ancrale keeps for its legal obligations, security and evidence: invoices and accounting records, the acceptance log, the access logs of the service, the IP addresses, browser information and security events of sign-ins, support and exit requests, reports and requests to exercise rights.

Cookies and browser storage

The Ancrale application sets only its own cookies, strictly necessary for the service you request (authentication, security, showing the progress of a task) and exempt from consent: this is why no banner asks for your agreement. It also keeps your favourite tools, signatures and watermark images in your browser's storage. Their list, purpose and duration are given on the Cookies and trackers page.

The www.ancrale.fr website

This part concerns visitors to the www.ancrale.fr website and people who write to us.

Data collected and purposes

We apply the principle of data minimisation. We only process:

Security data: your IP address, the page requested, the date and time of the request, the site you came from and the information sent by your browser are recorded automatically in the logs of the web server of the www.ancrale.fr website, for the sole purpose of keeping our infrastructure secure and preventing attacks.
Audience measurement data: visit statistics of the www.ancrale.fr website, compiled without cookies and without storing your IP address, described in the "Audience measurement on www.ancrale.fr" section.
Correspondence: if you write to us, your e-mail address, your name and the content of your message, for the sole purpose of replying to you.
Demo and contact requests: if you fill in a form on the Contact page, the information you enter in it (your first and last name, your e-mail address, your organisation, your phone number if you give it, the size of your team or the subject of your message, what you would like to see and your message), together with the language of the page and the date of the request, to reply to you, arrange the demo you asked for and follow up on your request.

Legal bases

The processing of security data, audience measurement and the processing of your correspondence are based on our legitimate interest in protecting our infrastructure, in knowing how the www.ancrale.fr website is visited in order to improve it, and in replying to the messages sent to us.

The processing of a demo request is based on the pre-contractual steps taken at your request (Article 6(1)(b) of the GDPR) where you are yourself the prospective customer and, otherwise, like that of a contact request, on our legitimate interest in answering the requests sent to us. The fields not marked "optional" and the checkbox are needed to handle your request: without them, the form cannot be sent. The checkbox of the forms confirms that you have read this policy: it does not collect your consent. You may at any time ask for your data to be erased and, where its processing is based on our legitimate interest, object to it (section "Your rights").

Hosting of www.ancrale.fr

The www.ancrale.fr website and the server of its audience measurement tool, which also receives the requests sent through its forms, are hosted in France by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France, acting as a processor.

Requests sent through the forms

A request sent through a form on the site is first kept on the server, hosted by OVH SAS, that receives it, until it has reached us in two ways: as an e-mail to our business mailbox, sent through Scaleway SAS, and as a record in our customer relationship management tool, which Ancrale runs itself, without a provider, on a server located in France. No e-mail is sent to the address you enter: we reply to you ourselves.

Audience measurement on www.ancrale.fr

The www.ancrale.fr website sets no cookie and uses no advertising tracker. Its only trackers are the audience measurement tool described below and, if you object to this measurement, the information that keeps this choice in your browser.

We measure visits to the site with Plausible Analytics, a cookie-free audience measurement tool that we host ourselves on servers located in France: no audience measurement data is passed to a third party.

For each page viewed, the tool records the address of the page, the site you came from or the campaign named in the link you followed, the device type, the browser and operating system, and the country derived from your IP address. The tool does not store your IP address: at the time of the visit, it is only used to derive your country and to compute, from your browser information and a random value renewed every 24 hours, a temporary identifier used to count visitors. The tool also records six actions on the site, without any data you enter and without the amount, the means or any identifier of your payment: a click on a button leading to the pricing or contact page, with its position on the page, opening a question in the FAQ, with the question opened, viewing the pricing page, sending a request through a form on the Contact page, with the type of request (demo or contact), a click on a button leading to the payment page, with the plan chosen, and viewing the thank-you page to which the payment page sends you back. We never match these statistics with the requests received through the forms. It also measures the time spent on each page and how far down the page you scroll.

These statistics are used only to measure the site's audience, solely on Ancrale's behalf. This audience measurement is exempt from consent under the conditions set by the CNIL (Article 82 of the French Data Protection Act). You may object to it at any time, without giving reasons, by ticking the box below: your browser keeps this choice and, from the next page, the tool no longer measures your visits from this browser, until you untick the box or clear the site's data; this choice applies to each browser and device where you tick the box. When JavaScript is turned off in your browser, no measurement takes place. Visits measured before you object cannot be linked to you.

Exclude my visits from audience measurement

Retention periods

Web server logs of www.ancrale.fr: 14 days.
Audience statistics of www.ancrale.fr: 25 months at most.
Correspondence: 3 years after our last exchange.
Requests sent through the forms: on the server that receives them, until they are passed on, and 3 years at most; in our business mailbox, 3 years after our last exchange; in our customer relationship management tool, 3 years after the request: the request is then deleted, together with your record if no other exchange or business relationship is linked to it; otherwise, your record is deleted 3 years after our last exchange. The name of your organisation stays in that tool, with no link to you. Data deleted from that tool stays in its encrypted backups until 30 newer daily backups replace them, about a month.

Recipients and transfers

We do not sell your data. It is intended for the Ancrale team and is disclosed only to the following recipients, each for its own part:

The customer and the people who manage its organisation: the data of the organisation's accounts, the history of tasks, the audit trail and quota usage, which they can view in the service and export under the terms of sale.
Scaleway SAS (France): hosting of the service, of its data and of the documents while they are processed, sending of the service's e-mails and of those that pass on to us the requests sent through the forms of the www.ancrale.fr website.
Stripe Payments Europe, Limited (Ireland): on Ancrale's behalf, managing the subscription, computing VAT and issuing invoices and receipts for plans subscribed to online; as a separate controller, carrying out the payment, preventing fraud and complying with its legal obligations.
Indy (France), e-invoicing: issuing and sending the quotes and invoices of the Integral plan.
OVH SAS (France): hosting of the www.ancrale.fr website and of the server on which Ancrale itself runs the audience measurement tool of that website and receives the requests sent through its forms.
Our business e-mail: the correspondence and requests you send us by e-mail or through the forms of the www.ancrale.fr website.
Authorities: where the law requires it, or where information gives rise to a suspicion of a criminal offence that threatens the life or safety of persons.

The providers acting as Ancrale's processors, including Scaleway SAS, OVH SAS and Indy, do so under a contract that complies with Article 28 of the GDPR. Stripe Payments Europe, Limited acts on Ancrale's behalf, under the same framework, for managing the subscription, VAT, invoices and receipts; for the payment, fraud prevention and its legal obligations, it acts as a separate controller. For documents, the list of sub-processors is published on the Sovereignty page.

Your documents and the data of your account in the service are hosted in France, by Scaleway SAS. The data needed to pay and invoice the subscription, and to prevent fraud, is passed to Stripe Payments Europe, Limited, established in Ireland; Stripe describes how it processes this data in its privacy policy (opens in a new window). No personal data and no document is submitted to a third-party artificial intelligence service.

Your rights

Under the GDPR and the French Data Protection Act, you have the following rights over your data:

Right of access and rectification: obtain confirmation that your data is processed, receive a copy of it and ask for it to be updated.
Right to erasure (right to be forgotten): ask for your data to be deleted.
Right to restriction: ask for the processing of your data to be restricted.
Right to data portability: receive the data you have given us, in a structured and commonly used format, or have it sent to another provider, where its processing is based on the performance of a contract with you or on pre-contractual steps taken at your request.
Right to object: object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest. You may object to audience measurement without giving reasons, by ticking the box in the part on audience measurement; for security logs and the audit trail, we may continue processing on compelling legitimate grounds.
Instructions after death: set instructions on what happens to your data after your death.

We ourselves take no decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you, within the meaning of Article 22 of the GDPR, and carry out no profiling. The automated fraud analysis that Stripe carries out during payment, as a separate controller, is described in the "Billing and invoices" section.

To exercise these rights, simply send us an e-mail at dpo@ancrale.fr. If you believe that your rights have not been respected, you may lodge a complaint with the CNIL (www.cnil.fr (opens in a new window)).

We reply within one month, which may be extended by two months given the complexity or number of requests; we then tell you so within the first month. If we have reasonable doubts about your identity, we may ask only for the information needed to verify it; we do not routinely ask for an ID document.

For the documents and text processed in the service, send your request to the customer concerned, which is their controller: Ancrale, which does not store them lastingly and therefore cannot identify the persons they concern, forwards to it without delay any request it receives and helps it, as far as possible, to answer.

We process your requests to exercise your rights and our exchanges to answer them and to show how they were handled, under our legal obligations (Articles 12 to 22 of the GDPR), and we keep them for 5 years.

Updates

Version 1, in force from 1 December 2026.