Privacy Policy
Dernière mise à jour : 14 avril 2026
1. Data controller
The data controller for data collected through the Certyneo platform is the company Certyneo SAS, whose registered office is located at 7 rue du Faubourg Saint-Honoré, 75008 Paris, France, registered with the Paris Commercial Register under number 930 253 148. For any questions regarding your personal data, you can contact us at privacy@certyneo.com.
2. Data collected
We collect the data you provide to us directly (first name, last name, email, hashed password, job title, company, phone number), the documents you upload for signature, as well as the technical metadata required to operate the Service (IP address, user agent, timestamp, session identifiers).
3. Purposes of processing
Your data is processed in order to: (i) provide and operate the electronic signature Service, (ii) guarantee the probative value of the signatures issued, (iii) bill your subscription, (iv) ensure the security of the platform and prevent fraud, (v) send you communications relating to the Service, and (vi) comply with our legal and regulatory obligations.
4. Legal basis
The processing operations are based on the performance of the contract between us (Article 6(1)(b) GDPR), on compliance with legal obligations (Article 6(1)(c)), and on our legitimate interest in securing our Service (Article 6(1)(f)). No processing for commercial prospecting purposes is carried out without your prior explicit consent.
5. Recipients
Your data is accessible to our strictly authorised technical and support teams, as well as to our current subprocessors: hosting provider (IONOS, European Union), transactional email service (Resend) and SMS OTP service (Twilio Verify). All our subprocessors are bound by contract and provide sufficient security guarantees. An up-to-date list is available on request from privacy@certyneo.com.
6. Hosting and location
Your data is hosted exclusively on servers located within the European Union (Germany). No personal data is transferred outside the EU without appropriate safeguards (European Commission standard contractual clauses).
7. Ikemdengel me Karate
An data me account-mo a karakarate ruen me user-mo a service. An document me sign ak an proof me audit a karakarate 10 years after an sign, ruen me eIDAS ak me Civil Code. An data me technique (logs) a karakarate 12 months maximum.
8. Eien mo-mo
Ruen me GDPR, eiye a have right me access, me rectification, me deletion, me limitation, me portability ak me opposition about an data-mo. Eiye a able meang exercise an right deai from an dashboard-mo o meang write us at privacy@certyneo.com. Eiye a have right too meang bring complaint at an CNIL (www.cnil.fr).
8.bis Data Protection Officer (DPO)
Certyneo a rely on an DPO me external me share via an cabinet DPO-Consulting. Eiye a able contact am at dpo@certyneo.com for any question about an data me personal-mo, ak address complaint at an CNIL (3, place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07) if eien request a stay without answer. An declaration at an CNIL at an register me DPO a make ruen me compliance-mo GDPR.
9. Security
We a put an measure me technique ak me organize meang protect an data-mo: encrypt me TLS 1.3 about all an communicate (Caddy 2 + Let's Encrypt), hash me scrypt with salt ak compare me timing-safe for an password me user, OTP Twilio Verify meang use once for an signature me advance, token me verify me email ak me reset me password meang use once ak meang valid short (1 hour), rate limiting by plan at an endpoint me sensitive, journal me time about each step me life me envelope (audit log), store me object with version a turn on about an document me sign, access me limit at an data by an administrator. An list me detail about an practice me security-mo a available at an page /security.
10. Cookie
We a use only an cookie me need strict meang work an Service (manage me session, prefer me language, protect me CSRF). No cookie me measure me audience me third o me advertise a put without an consent-mo me explicit.
11. Change
An policy a able grow meang show an change me service-mo o me rule me apply. Any change me substance a tell eiye by email. An date me update me last a at an top me page.
For any question about an data me personal-mo, contact an officer me protect an data-mo at privacy@certyneo.com.