FRENES

← StatusGuard

Privacy policy

This policy explains how [Company name] ("we"), publisher of StatusGuard, processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act.

1. Data controller

[Company name], [Registered office address]. Data protection contact / DPO: [GDPR contact / DPO].

2. Data processed, purposes and legal bases

  • Trial request (name, business email, company, optional phone, message, IP address, language, proof of acceptance of the terms) — pre-contractual measures; kept 365 days after processing.
  • Accounts and access (email, name, role, bcrypt-hashed password, sign-in dates, Microsoft Entra identifier when SSO is used) — performance of the contract; for the duration of the contract.
  • Billing (company name, billing email, amounts, invoices) — legal obligation; 10 years.
  • Security and audit log (actions, IP address, dates) — legitimate interest (service security); 365 days.
  • Transactional emails (invitations, password resets, reminders) — performance of the contract; log kept 180 days.
  • Consent records (accepted terms version, date, IP) — burden of proof; 1825 days.

Monitoring data entered by our customers (monitored URLs, check history, status pages) is processed on their behalf, as a processor (see the DPA); check history is kept 180 days.

3. Recipients and sub-processors

Data is accessible to our authorised staff and to our sub-processors (Microsoft Azure hosting in France, Stripe payments, email delivery). It is hosted in the European Union (Azure France Central region).

4. Security

Encrypted communications (HTTPS, TLS 1.2+), encrypted secrets, database isolated on a private network, encrypted backups, two-factor authentication for operators, access logging, lockout after failed sign-ins.

5. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. Space administrators can export and delete their space data from the console; each user can export their data from "My account". For any request: [GDPR contact / DPO]. You may lodge a complaint with your supervisory authority (in France, the CNIL — www.cnil.fr).

6. Deleting a space

Deletion of a space is carried out after a 30-day grace period (cancellable): monitoring data, accounts, requests and emails are erased; accounting records are kept without any other data.

7. Cookies

Only strictly necessary cookies: session (cp_session), security (CSRF token stored in the session) and language (sg_lang). No advertising or analytics trackers.

Version 2026-10 — publisher: [Company name].