Cuevr · Privacy & Data

Cuevr privacy & data

Read from Cuevr's own page on 2026-11-09. 28 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.

Role

value: both
Aetherly is the controller for the website, its customers’ accounts, subscriptions, invoicing, support, the security of the service and its own prospecting. For the proposals its customers send with Cuevr, Aetherly is each customer’s processor (Article 4).
Read from Cuevr's own page on 2026-11-09

Data categories

category: contact
Demo request : first name, business e-mail address and company; surname and telephone number if you provide them.
Read from Cuevr's own page on 2026-11-09
category: communication
Contact form : e-mail address, reason and message, and any other fields you fill in.
Read from Cuevr's own page on 2026-11-09
category: identifying
Your account : e-mail address, password (stored as a hash, never in plain text), first name, surname, job title, language;
Read from Cuevr's own page on 2026-11-09
category: financial
Your card is entered and stored by Stripe; we never have its number.
Read from Cuevr's own page on 2026-11-09
category: device
pages viewed, referring site, country, device and browser type, clicks on the demo and trial buttons, outbound links.
Read from Cuevr's own page on 2026-11-09
category: behavioral
Google Analytics measures use of the application (pages and actions, with an account identifier).
Read from Cuevr's own page on 2026-11-09

Purposes

purpose: Proposal access and protection
To give you access to the proposal and protect that access (password, code received by e-mail).
Read from Cuevr's own page on 2026-11-09
purpose: Contract performance
To provide the service, manage your account and organisation, and respond to support requests: performance of the contract.
Read from Cuevr's own page on 2026-11-09
purpose: Invoicing and accounts
To invoice and keep our accounts: our legal obligations.
Read from Cuevr's own page on 2026-11-09
purpose: Advertising measurement
To measure the effectiveness of our advertisements (gclid): our legitimate interest.
Read from Cuevr's own page on 2026-11-09

Retention

scope: Demo, contact and Proposal Roaster requestsperiod: 3 years
Demo, contact and Proposal Roaster requests: 3 years after our last exchange, then automatic deletion.
Read from Cuevr's own page on 2026-11-09
scope: Account after deletion requestperiod: 30 days
After a deletion request, it is erased 30 days later; you may cancel the request in the meantime.
Read from Cuevr's own page on 2026-11-09
scope: Invoices and billing dataperiod: 10 years
Invoices and billing data: 10 years (Article L123-22 of the French Commercial Code).
Read from Cuevr's own page on 2026-11-09
scope: Proposal reading detailsperiod: 13 months
Reading details (visits, time per section, options, opening of the signature form): 13 months after the last activity.
Read from Cuevr's own page on 2026-11-09
scope: Google Analytics dataperiod: 14 months
Google Analytics data: no more than 14 months.
Read from Cuevr's own page on 2026-11-09
scope: Login and technical logsperiod: 6 months
Login logs and technical logs: no more than 6 months.
Read from Cuevr's own page on 2026-11-09

Residency

region: France
Scaleway (France): hosting of the application and its files, in France.
Read from Cuevr's own page on 2026-11-09
region: European Union
Mailjet (France): sending of application e-mails, in the European Union.
Read from Cuevr's own page on 2026-11-09

International transfers

mechanism: adequacy
These transfers are based on an adequacy decision of the European Commission (which covers Switzerland, as well as US companies that participate in the EU-US Data Privacy Framework) or on the European Commission’s standard contractual clauses.
Read from Cuevr's own page on 2026-11-09
mechanism: SCC
or on the European Commission’s standard contractual clauses.
Read from Cuevr's own page on 2026-11-09

Subprocessors

Each one receives only what its task requires.
Read from Cuevr's own page on 2026-11-09

Data processing agreement

available: true
we act on your behalf, as provided in the Data Processing Agreement annexed to our Terms and Conditions.
Read from Cuevr's own page on 2026-11-09

Deletion

route: In-app deletion request, erased 30 days later
After a deletion request, it is erased 30 days later; you may cancel the request in the meantime.
Read from Cuevr's own page on 2026-11-09

Data subject rights

right: Access, rectification, erasure, restriction, portability, objection
You have the right of access, rectification, erasure, restriction, portability and objection, in particular to prospecting, at any time.
Read from Cuevr's own page on 2026-11-09
right: Withdraw consent
Where processing is based on your consent, you may withdraw it at any time.
Read from Cuevr's own page on 2026-11-09
right: Complaint to authority
you may lodge a complaint with the CNIL (the French data protection authority, www.cnil.fr) or with the data protection authority of your country.
Read from Cuevr's own page on 2026-11-09

Sale or sharing

stance: prohibited
We do not use your data for our own purposes and do not sell it.
Read from Cuevr's own page on 2026-11-09

Document

Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page