Privacy Policy

The presence.green service (the "Service") is published by Alexandre GORSKI EI, a French sole proprietor (entrepreneur individuel, micro-entreprise), registered under SIREN number 911 947 786, registered office at 2 Boulevard de Strasbourg, 31000 Toulouse, France ("presence.green", "we"), acting as data controller for the processing described in this policy.

Contact: contact@presence.green

This policy applies to holders of a presence.green account (the "Clients"), visitors of the presence.green website, and anyone who contacts us.

Special case: visitors of the public pages published by our Clients (presence.green/p/…). For data processed on those pages — in particular messages sent to the conversational assistant — the Client operating the page is the data controller and presence.green acts as a data processor, under the "Data Processing Agreement" annex of the Terms of Use. Section 8 below summarises what applies to them.

Account. Name, email address, password (stored exclusively in hashed form, never in plain text), language, interface preferences. If you sign up with Google, we receive from Google your name, email address and an account identifier. Purpose: account creation and management, provision of the Service. Legal basis: performance of the contract.

Business profile. The content the Client provides to build their public page (texts, photographs, business contact details, opening hours). This content is intended for publication. Legal basis: performance of the contract.

Conversations with the assistance tools. Messages exchanged by the Client with the dashboard's AI assistance tools (onboarding, editing assistant, content imports). Purpose: building and editing the profile. Legal basis: performance of the contract.

Technical data and security. IP addresses in hashed form (never stored in plain text) and technical logs. Purposes: security of the Service, abuse prevention, quota enforcement. Legal basis: legitimate interest.

Audience measurement on public pages. Aggregated daily counters (page views, QR code scans, contact clicks, conversations), deduplicated using a hashed fingerprint of the IP address, without individual tracking or profiling. Legal basis: legitimate interest.

Transactional emails. Your email address is used for the emails required to operate the account: verification code, password reset, email change confirmation. Legal basis: performance of the contract.

Marketing communications. Only if you have consented to them (dedicated setting in your account). Consent can be withdrawn at any time, in the same place. Legal basis: consent.

Payment. Payments are operated by Stripe (Stripe Payments Europe, Ltd), acting as a separate data controller, in accordance with Stripe's privacy policy (stripe.com/privacy). presence.green neither collects nor stores any payment card data.

presence.green only uses cookies that are strictly necessary for the operation of the Service: authentication session and interface preferences. The browser also stores display preferences locally (theme) and, on public pages, a technical conversation session identifier valid for 24 hours.

No advertising cookies, no third-party trackers, no resale of browsing data. As these cookies and storage are exempt from consent requirements, the Service does not display a cookie banner. During checkout, the Stripe checkout page may set its own cookies, described in Stripe's privacy policy.

Data is never sold, rented or shared for advertising purposes. It is processed by the following providers, each within its own scope:

• Cloudflare, Inc. — hosting and infrastructure (data storage, delivery of the Service);
• Anthropic — generation of the responses of the artificial-intelligence features;
• Resend — delivery of transactional emails;
• Stripe (Stripe Payments Europe, Ltd) — payments and invoicing, as a separate data controller.

Data may also be disclosed to authorities where required by law.

Our providers may process data outside the European Union, in particular in the United States and on Cloudflare's global network. These transfers are governed by appropriate safeguards within the meaning of Chapter V of the GDPR, in particular the European Commission's standard contractual clauses and, where applicable, the applicable adequacy frameworks.

• Account and profile: for the duration of the contract, then deleted no later than 12 months after the account's last activity, preceded by a reminder email. Deletion can be requested at any time (see section 9) and is carried out within one month at most;
• Unverified accounts: deleted 7 days after creation;
• Login sessions: 30 days;
• Visitor conversations with the public-page assistant: 6 months at most;
• Audience measurement: the retained counters are aggregated and contain no personal data; the hashed fingerprints used for deduplication are purged automatically;
• Accounting records related to payments: 10 years, in accordance with legal obligations.

If you visit a business's public page (presence.green/p/…), the messages you send to its conversational assistant are processed on behalf of that business, which is the data controller. They are used to generate the assistant's responses and to let you resume your conversation for 24 hours, then retained under the conditions of section 7. Your IP address is processed in hashed form for security and deduplicated audience measurement.

We recommend not sharing sensitive data in these conversations. To exercise your rights over this data, contact the business concerned; you may also write to contact@presence.green, and we will forward your request.

In accordance with the GDPR, you have the rights of access, rectification, erasure, portability, restriction and objection, as well as the right to withdraw your consent at any time for the processing based on it.

These rights can be exercised by writing to contact@presence.green. We respond within one month. You may also lodge a complaint with the French supervisory authority, the CNIL (cnil.fr).

presence.green implements appropriate technical and organisational measures: encryption of exchanges in transit (TLS), hashing of passwords and IP addresses, segregation of databases, access control.

This policy may be updated, in particular as the Service or regulations evolve. The date of the last update appears at the top of the document; any substantial change is communicated to Clients.