This Privacy Policy explains how DB Conseils & Développement ("we", "us") collects, uses, stores, and protects personal data when you use BlockSpot Formula (the "Service"). By using the Service, you agree to the practices described below.
1. Data We Collect
We collect only what is strictly necessary to operate the Service:
- Identification data: name, surname, business email address, account information.
- HubSpot data: object properties (contacts, companies, deals, tickets, custom objects), field values, and technical metadata required to execute formulas according to your permissions.
- Billing data: subscription details (processed by our payment provider).
- Technical data: connection logs, IP addresses, browser/OS information, and usage analytics of the Service.
2. Purposes & Legal Bases
We use your data solely to:
- Provide, operate, and improve BlockSpot Formula.
- Enable the creation and execution of dynamic formulas using HubSpot data.
- Ensure the Service’s security, traceability, and compliance.
- Manage billing, subscription lifecycle, and customer support.
- Communicate with you (support, updates, security or service notices).
Legal bases under GDPR:
- Contract performance (Art. 6(1)(b)) – to deliver the Service you subscribed to.
- Legitimate interests (Art. 6(1)(f)) – to secure and improve the Service.
- Consent (Art. 6(1)(a)) – for optional features (e.g., certain analytics/cookies) where required.
- Legal obligation (Art. 6(1)(c)) – to comply with applicable laws (e.g., invoicing, security).
3. Data Retention
- We keep personal data only as long as necessary to provide the Service and meet legal requirements.
- Technical logs are retained for up to 12 months.
- Upon account deletion, data is erased or anonymized within 30 days (unless a longer period is required by law).
5. Security
- Secure hosting in GDPR-aligned datacenters.
- Encrypted communications (HTTPS/TLS).
- Role-based access control and least-privilege principles.
- Regular backups and monitoring.
6. Your Rights (GDPR)
You may exercise the following rights:
- Access, rectification, and deletion.
- Restriction or objection to processing.
- Data portability.
- Complaint with a supervisory authority (e.g., CNIL in France).
To exercise your rights, use the contact form.
7. International Transfers
Where data is transferred outside the European Economic Area, we implement appropriate safeguards (e.g., Standard Contractual Clauses, adequacy decisions) to protect your information.
9. Children’s Privacy
The Service is intended for business users and is not directed to children under 16. We do not knowingly collect personal data from children.
10. Policy Updates
We may update this Policy from time to time. Significant changes will be notified in-app or by email.