Legal
Privacy policy
What data we collect, why, for how long, and what you can require regarding it.
This is a translation provided for convenience. In the event of any discrepancy, the French version prevails.
Data controller
L'éditeur de Gestio is the controller of the data described below. To exercise your rights or for any question, write to contact@gestio-app.com or call +212 771 311 832.
For the data your business enters about its own customers, your business is the controller: we act only as a technical processor, on your instructions.
Data we collect
We collect only what the service needs to work.
- Account: name, phone number (which serves as the sign-in identifier), any email address, role in the business.
- Business: company name, address, phone, legal identifiers (RC, ICE, CNSS) and logo, as you enter them for your invoices.
- Activity data: products, customers, suppliers, sales, purchases, documents and settlements that you record.
- Technical data: last sign-in date and security logs, kept to detect abnormal access.
- Free templates (/templates): the e-mail address asked for before the first print, with the template name, sent to our sales team so we can contact you about Gestio. The document you fill in is not sent: it stays in your browser.
Why this data
It is used to provide the service: to authenticate you, show your figures, produce your invoices and statements, and reach you about your account or subscription.
We do not use your business data for advertising, and we neither sell nor rent it to anyone.
Activity log
On accounts with several employees, the software records the actions carried out (sale created, product changed, payment recorded) with their author and date. This log is visible only to the person responsible for the business.
It exists for accounting traceability, not to monitor working time. We access it only at the request of the person responsible, as part of support.
Who has access
Each business sees only its own data: the separation is enforced by the server on every request, not by the interface. Within a business, each employee sees only what their role permits.
Our technical team may access data where that is indispensable to resolve an incident or answer a support request.
Hosting and security
Exchanges between the applications and our servers are encrypted. Passwords are never kept in clear text, sessions expire automatically, and uploaded images are re-encoded before being stored.
No system is infallible: in the event of a data breach liable to harm you, the businesses concerned are informed.
Retention period
Your data is kept as long as your account is active, then for a reasonable period after it closes so that it can be reactivated or exported, before permanent deletion.
Immediate deletion may be requested at any time, subject to the retention periods imposed by the accounting regulations applicable to your business.
Your rights
Under law 09-08 on the protection of individuals with regard to the processing of personal data, you have rights of access, rectification, objection and deletion.
You may exercise these rights by writing to contact@gestio-app.com or by calling +212 771 311 832. You will receive a reply as soon as possible.
Exporting your data
You do not need to write to us to get your data back: every list screen allows an export to Excel, CSV or PDF, and invoices as well as statements of account download straight from the application.
Changes to this policy
This policy may change along with the service or with regulation. The update date appears at the top of the page, and important changes are notified to the customers concerned.
A question about this text? Write to us or call +212 771 311 832.