Privacy policy
This policy describes how AA Conseil Invest SAS processes personal data as part of the Simple Work service.
Data controller
AA Conseil Invest SAS, 16 place des Quinconces, 33000 Bordeaux, France — contact@vulcain-small-app.com.
Two categories of data, two controllers
Account data (name, email, password, organization, billing) is processed by AA Conseil Invest SAS, which is the controller.
Business data you enter in the app (cases, clients, contacts, documents) relates to your own activity: your organization, as the subscriber, is the controller for that data. AA Conseil Invest SAS only acts as a processor within the meaning of Article 28 of the GDPR, strictly for the technical provision of the service.
Data collected
- Account: full name, email address, password (hashed), role
- Organization: name and company information you provide
- Billing: handled directly by Stripe — we do not store card data
- Business data: cases, clients, contacts, documents and invoices you create in the app
Purposes
- Providing access to the service and its features
- Managing the subscription and billing
- Securing accounts and technically isolating each organization's data
- Responding to your support requests
Legal basis
Performance of the contract binding us (Simple Work subscription) and, for security-related processing, our legitimate interest in protecting the service and its users.
Recipients and processors
Some data is processed by service providers, strictly to the extent necessary to provide the service:
- Supabase — database hosting, authentication, file storage
- Stripe — payment and billing processing
- Resend — sending transactional emails
- Vercel — application hosting, anonymized audience measurement (Vercel Analytics)
Retention period
Data is kept for the duration of the contractual relationship, then deleted or archived in accordance with applicable legal obligations (notably accounting and tax obligations).
Security
Each organization's data is technically isolated from other organizations' data at the database level: no organization can access another's data.
Cookies
Only cookies strictly necessary for the service to work (authentication, session persistence, language preference) are set. No advertising cookie is used. Site traffic is measured anonymously via Vercel Analytics, a tool that sets no cookie and cannot identify you individually.
Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, object to, and port your data. For account data, contact us at contact@vulcain-small-app.com. For business data entered by the organization you belong to, contact its administrator directly, who is solely responsible for that processing. You may also lodge a complaint with the CNIL (www.cnil.fr).
Contact
contact@vulcain-small-app.com