Privacy

Data controller

The data controller is the publisher of the website and the application, Félix Boittin, sole proprietor (entrepreneur individuel, EI), trading as Clivio, 10 rue des Aqueducs, 94250 Gentilly, identified in the legal notice. For any question about your data: contact@clivio.app.

What this policy covers

It covers visitors to the Probant website and people registered with the application.

Visitors to the stores that use Probant are processed on behalf of those stores: the related commitments are set out in the data processing agreement.

Website visitors

The website sets no cookies for visitors who are not signed in and includes no audience measurement tool. The address entered in “Try it on my page” is passed to the sign-up page, in that page’s URL. Requests go through the hosting provider, Scaleway; the content and retention period of its technical logs are not yet specified.

Registered users

• Email address and name, for the account and sign-in. The password is kept only as a hash, in Probant’s database; sign-in sessions keep neither the IP address nor the browser.
• Role in each workspace.
• Choice of emails received (the Monday update, for example) and a log of emails sent outside account emails: template and date, so the same email is never sent twice and no more than one is sent per day.
• Content created in the application: experiments, variants, ideas, metrics, decisions, rollouts.
• If the AI features are turned on, the following is sent to Mistral AI to produce a response: the instruction written in the editor, a compact outline of the page being edited, and the changes in progress; questions asked to “Ask Probant”, with the workspace data that answers them.
• Messages written to the Probant team from the support window, with the workspace and page displayed when the message was sent. They stay in Probant’s database: the alerts sent to the team (Slack, email) and the email announcing a reply contain neither the text of the messages nor the person’s address.

Visitors to customer stores

On a customer store’s site, the Probant script processes a random identifier and events (visits, exposures, conversions, measurements), only after the visitor’s consent when the store requires it, which is the default setting. When session summaries are turned on, the journey of a session (pages, clicks, errors) is sent to Mistral AI, without the visitor’s identifier, to write a one-sentence summary. Details are in the data processing agreement.

Purposes and legal bases

Registered users’ data is used to create the account and sign in, to operate the service, to answer messages sent to support, to send the service emails the person has not turned off (alerts, the Monday update) and, when the AI features are used (editor assistant, “Ask Probant”, session summaries), to produce their response. The legal basis of each processing activity is not yet specified.

Retention periods

• Visitor events: deleted nightly after 13 months, counted from when they were received.
• Script visitor cookie: 390 days at most, never extended.
• Accounts and workspace content: canceling the plan does not delete them. The account, and each workspace with its content, can be deleted at any time from the application.
• Support conversations: deleted with the account, and nightly 13 months after their last message.
• Log of emails sent: deleted with the account, and nightly 13 months after sending.
• Addresses that refuse our emails (hard bounce, spam complaint): kept only as a hash, so that they only receive account-related emails from then on.

Recipients and subprocessors

The services that process data for Probant, with the data they receive, are listed on the Subprocessors page.

Place of processing

Database and compute in Amsterdam, with Scaleway, in the European Union. Scaleway, which hosts the database and compute, is a French company. Depending on the feature used, Mistral may temporarily transfer data outside the European Union to the subprocessors it publishes; its data processing agreement limits these transfers to countries the EU recognizes as adequate, or covers them with standard contractual clauses. Stripe transfers payment data to Stripe, LLC, in the United States, under the Data Privacy Framework and, failing that, standard contractual clauses. Whatever region is chosen, Sentry may keep the data of Probant’s Sentry account (members, settings, audit log, project descriptions) in the United States; reported errors stay in Frankfurt.

Your rights

You can request access to your data, its rectification, its erasure, the restriction of processing or data portability, and you can object to processing. You can also lodge a complaint with the CNIL, the French data protection authority.

You can delete your account yourself from the application. To exercise your other rights, write to contact@clivio.app; we reply within 48 hours.

Security

Hosting, consent, cookies, retention, and access are described on the Security and GDPR page.