Your clients’ data, processed on your behalf.
This English translation is provided for convenience. The French version is the legally binding one: read it in French.
When you record your clients, their sites, your jobs, reports and photos in Neatvaro, you are the controller of this processing and Neatvaro acts as a processor. This agreement applies from the creation of your account and forms part of the terms of the service.
1. The parties
The controller is the professional who holds the Neatvaro account (“you”). The processor is Cameron Lumpini Nge Ntika, sole trader (entrepreneur individuel), trading name Neatvaro, SIREN 107 805 954, 13 avenue Léon Morane, 78360 Montesson, France (“Neatvaro”).
2. What is processed
Purpose: managing your quotes, clients, sites, service visits and reports, sending your quotes, collecting acceptance and sharing the reports you choose. Neatvaro separately controls matching and account data as explained in the privacy policy. Data subjects: your clients and their contacts. Data: names, e-mail addresses, telephone numbers, site addresses, access instructions, notes, service reports and photos; names and static simple-signature drawings, document fingerprints and acceptance evidence. Duration: that of your account. Do not upload sensitive data within the meaning of Article 9 of the GDPR; avoid photographing people.
3. Neatvaro’s commitments
Neatvaro processes this data solely to provide the service and in accordance with your instructions, which consist of the use of the software and this agreement. If an instruction appears to it to infringe the law, Neatvaro informs you. Any person authorised to access the data is bound by confidentiality. Neatvaro neither sells nor reuses your data or that of your clients.
4. Security
Measures in place: encrypted connection (HTTPS); passwords protected by a salted hash and a secret server key; random sessions stored in hashed form; blocking of repeated login attempts; isolation of each account, checked by automated tests; photos and logos in private storage; random report links, limited to one report, expiring after 30 days and revocable; internal notes excluded from shared reports.
5. Sub-processors
You authorise Neatvaro to use: Netlify, Inc. (United States; hosting is not guaranteed to be exclusively European, see the provider’s data processing agreement), hosting of the site, the database, logos and photos; Sendinblue SAS, Brevo brand (France), for service emails, quotes and attached accepted documents, optional reminders and new-request alerts. The optional AI assistant sends to DeepSeek (China) your free-text messages and relevant current-quote context, potentially including financial assumptions: do not include personal client data. Partial masking does not remove all names or addresses, and the provider may retain copies. The API contractual and transfer safeguards must be established before transferring personal data; this agreement and a warning alone do not establish them. Neatvaro informs you by e-mail of any addition or replacement at least 30 days in advance; you may object to it by terminating.
6. Data subjects’ rights
If one of your clients exercises their rights with Neatvaro, the request is forwarded to you without delay. The software allows you to view, correct, export and delete their data yourself.
7. Data breach
Neatvaro notifies you of any personal data breach as soon as possible and no later than 48 hours after becoming aware of it, with the information available, so that you can notify the CNIL within 72 hours if necessary.
8. End of the service
You may export your data at any time. When your account is deleted, data is erased from the active database. Independent records lawfully retained by a professional and Neatvaro accounting records follow separate obligations. The host’s technical backups disappear according to their own cycle.
9. Verification
On request to contact@neatvaro.com, Neatvaro provides you with the information necessary to demonstrate compliance with this agreement and permits proportionate audits by you or a mandated auditor. Neatvaro assists, within its role and available information, with rights requests, security incidents, impact assessments and consultation obligations. It informs you if an instruction appears to infringe applicable data protection law.