Privacy policy

1. Purpose and scope

Caspario protects its users' personal data in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the French Data Protection Act of 6 January 1978, as amended.

This policy explains what data we collect, why, how long we keep it, who we share it with, and how you can exercise your rights.

It covers:

• the website www.caspario.ai ;
• the Caspario application (hereinafter "the Service"), including the Maïa AI assistant;
• our communications with you as a user (support, communications regarding the Service).

The corporate client undertakes to provide this information to its employees who use the Service.

‍

2. Who is responsible for your data

Caspario acts in two different roles depending on the data concerned:

• Data controller for your user account data, billing information, marketing data, and data regarding your browsing on the site and use of the Service. We determine why and how this data is processed.
• Data processor for data that our clients enter or import into the Service (for example, information on the farms they monitor, their own clients, prospects, or employees, including confidential information). The client remains the data controller for this data; we process it solely on their instructions, within the framework of the contract and the accompanying data processing agreement.

Identity of the data controller: CASPARIO, a simplified joint-stock company (société par actions simplifiée) with a capital of €1,350, registered with the Bordeaux Trade and Companies Register under number 130 768 633, with its registered office at 199 B rue de Pessac, 33000 Bordeaux, represented by Emmanuel le Blanc, CEO.

Data protection contact: support@caspario.fr.

Data Protection Officer: Sébastien Doncker.

If you are an employee or a contact of a Caspario client and you wish to exercise your rights regarding data for which your employer or supplier is the controller, please contact them directly in the first instance. We will assist them in responding.

‍

3. Data we collect

We collect data when you fill out a form (contact, demo, registration), use the Service, communicate with our team, or interact with us on social media. We also receive technical data automatically.

The categories of data concerned are:

• Identification and contact details : surname, first name, professional email address, telephone number, job title, company;
• Account and authentication : username, password (stored in encrypted form), role within the organisation;
• Use of the Service : actions performed, features used, connection logs, IP address, device and browser type;
• Content entered into the Service : information entered or imported regarding the farms monitored and their clients (Caspario acts as a data processor in this instance, see section 2);
• Interactions with Maïa : questions asked and responses generated (see section 6);
• Billing : billing details, invoice history;
• Communication with us : emails, messages, and calls with our team;

Content entered into the Service includes confidential information regarding the farms being monitored (economic, technical, and commercial data). We treat this as such: restricted access, contractual confidentiality (see sections 6, 9, and 10).

Some information is mandatory for providing the Service; we will indicate this at the time of collection, along with the consequences of refusing to provide it.

‍

4. Why we use your data

Each use has a specific purpose and a single legal basis:

• Performance of the contract : to create and manage your account and provide access to the Service; to provide the features of the Service, including Maïa; to provide support and respond to your requests; to inform you about the Service (maintenance, security, significant updates);
• Performance of the contract and legal obligation : to invoice, maintain our accounts, and manage outstanding payments;
• Pre-contractual measures : to process your contact and demonstration requests;
• Legitimate interest : to ensure the security of the Service, prevent fraud and abuse, and resolve incidents (protecting the Service and its users); to measure usage and improve the Service (product improvement); for B2B direct marketing (see section 5);
• Legal obligation and legitimate interest : to comply with our legal obligations and to defend our legal rights.

Where we rely on your consent, you may withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

‍

5. Direct marketing

We may use your professional contact details to send you information about Caspario (newsletters, invitations to events or demonstrations) when it is relevant to your professional activity.

You can opt out at any time, free of charge, via the unsubscribe link in every message or by emailing support@caspario.fr. We will then cease all solicitation.

‍

6. Maïa AI Assistant

Maïa is the AI assistant integrated into Caspario. When you use it, your questions and the elements of the Service required to answer them are sent to one or more AI model providers who act as our subcontractors. These exchanges may involve the transfer of data to the United States (see section 8).

• Your data is not used to train AI models, neither by Caspario nor by these providers.
• Maïa's responses are generated automatically and may contain errors: please verify them before making decisions.
• Maïa does not make any decisions that produce legal effects on you; you retain control over the actions taken.
• Retention of conversations: as long as your organisation is a client, then for 1 year.

‍

7. Who can access your data

Access is restricted to:

• authorised Caspario personnel, who are bound by a duty of confidentiality, to the extent necessary for their duties;
• our subcontractors, who act on our instructions and under guarantees equivalent to our own;
• authorities and professionals legally authorised or required for the defence of our rights (courts, lawyers, chartered accountants, auditors, bailiffs, debt collection agencies);
• in the event of a merger, acquisition or sale, the entity concerned, subject to a confidentiality agreement.

We do not sell or rent your data.

‍

8. Hosting and transfers outside the European Union

Your data is hosted by Railway and Scaleway within the European Union.

Your data is stored within the European Union. However, some processing may involve the transfer of data to the United States. These transfers are based on guarantees of compliance with GDPR regulations. You may obtain a copy of these guarantees upon request.

‍

9. How long we keep your data

We only keep your data for as long as is necessary for each purpose:

• Account and usage data : for as long as your organisation is a client, then 1 year;
• Content entered by the client (Caspario as data processor) : for as long as the client is a user of the Service, then 1 year;
• Conversations with Maïa : for as long as your organisation is a client, then 1 year;
• Prospects and business contacts : 3 years after the last contact;
• Invoicing and accounting documents : 10 years;
• Connection logs : 1 year;
• Evidence in the event of a dispute : up to 5 years (statutory limitation period).

Once these periods have expired, the data is deleted or anonymised.

‍

10. Security

We implement appropriate technical and organisational measures to protect your data against loss, alteration, disclosure, or unauthorised access.‍

In the event of a data breach likely to pose a risk to your rights, we will notify the CNIL within 72 hours and, where required by law, the individuals concerned.

‍

11. Your rights

You have the following rights regarding your data:

• access : to know if we are processing your data and to obtain a copy (Art. 15);
• rectification : to have inaccurate or incomplete data corrected (Art. 16);
• erasure : to request the deletion of your data in cases provided for by law (Art. 17);
• restriction : to request the temporary suspension of processing (Art. 18);
• portability : to receive your data in a structured, machine-readable format (Art. 20);
• objection : to object, on grounds relating to your particular situation, to processing based on legitimate interest, and at any time to direct marketing (Art. 21);
• withdrawal of consent at any time, for processing based on this;

How to exercise them: by email at support@caspario.fr or by post to CASPARIO, 199 B rue de Pessac, 33000 Bordeaux. We will respond within one month (extendable by two months for complex requests, with prior notification). Exercising your rights is free of charge, unless the request is manifestly unfounded or excessive. We may only ask for proof of identity if there is reasonable doubt regarding your identity.

To delete your account, please refer to our dedicated page.

Complaint: if you believe your rights are not being respected, you may contact the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 – cnil.fr/plaintes).

‍

12. Changes to this policy

We may update this policy, particularly if the Service or regulations change. The current version is always available on our website, along with its update date. We will notify you of any substantial changes.

‍