This English translation is provided for convenience only. The French version is the only legally binding one.
1. Data controller
The controller of personal data is TECHNOCARE (SARL), 2 avenue Marie Laurent, 95400 Villiers-le-Bel, France, SIRET 79419932300013. Contact: contact@fizable.io.
2. Data collected
- Identification: email address (account creation, delivery, communication).
- Questionnaire answers: the information about your project that you provide, needed to produce the study.
- Working documents: the files you choose to upload (optional) are stored securely, then their content is extracted and analyzed to enrich your study. Upload only documents to which you hold the rights and avoid including unnecessary sensitive data.
- Order and billing data: tier, options, amount, transaction identifier. Bank card data is processed by Stripe and is never stored by Fizable.
- Technical data: IP address and connection logs, for security purposes.
3. Purposes and legal bases
- Producing and delivering the study, managing the order and access: performance of the contract.
- Security, fraud prevention, service improvement: legitimate interest.
- Billing and accounting: legal obligation.
- Any non-essential communications: consent.
4. Use of artificial intelligence
Your answers are used to generate the study with the help of an AI model. This is production assistance: there is no fully automated decision producing legal effects concerning you within the meaning of article 22 of the GDPR. The generated content is a decision-support tool, to be checked.
5. Recipients and processors
Your data is accessible to TECHNOCARE and its technical processors, chosen for their safeguards. We never sell your data.
- OVH SAS: hosting of the application (France, EU).
- Neon: database hosting (European Union).
- Stripe: payment.
- Resend: sending transactional emails.
- Cloudflare, Inc.: DNS, CDN and security.
- Anthropic: AI-assisted generation of the studies.
- Mistral AI (France, European Union): automatic consistency checking of questionnaire answers.
- Crisp IM SARL (France, European Union): support messaging service (chat). The exchanges you initiate in the chat are processed to respond to your requests.
6. Retention period
- Account data and answers: during the provision of the service, then archiving or deletion.
- Uploaded working documents: kept for the time needed to produce your study. If the order is not paid, they are automatically deleted within 30 days.
- Billing data: 10 years (legal accounting obligation).
- Connection logs: 12 months.
You can request the deletion of your answers at any time; data subject to a legal obligation is kept for the required period.
7. International transfers
Some processors (e.g. Cloudflare, Anthropic) may process data outside the European Union. These transfers are governed by the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses.
8. Security
We implement appropriate measures: HTTPS/TLS encryption of all communications, automatically renewed SSL certificates, Cloudflare network protection, data access restricted to the least-privilege principle, and database hosting in the European Union.
9. Your rights
In accordance with the GDPR, you have the rights of access, rectification, erasure, objection, restriction and portability, as well as the right to withdraw your consent. To exercise them, write to contact@fizable.io; we reply within a maximum of 30 days. You may lodge a complaint with the CNIL (cnil.fr).
10. Cookies and consent
Fizable places cookies strictly necessary for the operation of the site (login session, back-office access, security): they do not require your consent. No advertising tracking cookie or third-party audience-measurement cookie is placed.
Our support chat (Crisp, hosted in the European Union) places a functional cookie to keep the thread of your conversation. It is only loaded after your explicit consent: until you have accepted, no Crisp cookie is placed. You can accept, refuse, or change your choice at any time via the "Manage cookies" link at the bottom of every page.
To understand site traffic (number of visitors, pages viewed, traffic sources), we use a self-hosted audience-measurement tool on our own infrastructure (Umami), configured without cookies and without cross-site matching: visitors are not identified and the data remains aggregated. Strictly limited to our statistical needs, this measurement does not require consent in accordance with the CNIL's recommendations, and no data is transmitted to a third party for this purpose.