Privacy policy

The data controller is KIAMAZULU Conseils, a Société par actions simplifiée unipersonnelle, 144 rue Émile Zola, 92600 Asnières-sur-Seine, France, registered with the Nanterre trade and companies register under number 939 087 839.

For any question about your data, or to exercise your rights: privacy@votanza.com.

Given its size and the nature of its processing, the publisher is not required to appoint a data protection officer.

Votanza is a tool for organising: a user creates a poll, a list or a booking page, then invites participants.

For their own account data — identity, email address, subscription — the publisher is the data controller.

For the data an organiser collects from their own participants, it is the organiser who decides the purpose: they are the controller, and the publisher acts as a processor. If you answered a poll and want your answers deleted, contact the organiser first; the publisher can step in if they do not respond.

Creating and managing an account: email address, display name, hashed password, language and time zone, profile picture if you provide one. Legal basis: performance of the contract.

Using the service: the polls, contribution lists, meetings, events, booking pages and contacts you create, along with participants' answers. Legal basis: performance of the contract.

Participating without an account: when a participant answers a poll without signing up, only their display name, their answers and, if they provide it, their email address are stored. Legal basis: the organiser's legitimate interest in collecting answers.

Paid subscriptions: the payment provider's customer identifier, the plan taken out, the renewal date and the billing history. Card details never pass through the publisher's servers and are not stored by it. Legal basis: performance of the contract and the legal obligation to retain accounting records.

Transactional messages: recipients' addresses, the subject and body of messages sent by the service, and their delivery status. Legal basis: performance of the contract.

Calendar synchronisation, if you enable it: access tokens for your calendar and busy periods, used solely to avoid double bookings. Legal basis: consent, which you can withdraw at any time from your settings.

Security and abuse prevention: hashed IP addresses, sign-in timestamps, rate-limiting counters. Legal basis: legitimate interest in protecting the service.

Your data is neither sold, rented, nor transferred to third parties for commercial purposes.

No behavioural advertising is served on the service, and no third-party advertising tracker is set.

No decision producing legal effects concerning you is taken solely on the basis of automated processing.

On booking pages, the organizer can see a reliability indicator for their clients: the number of appointments cancelled less than 24 hours before the scheduled time, or manually marked as no-show, out of the total number of appointments already past. Legal basis: the organizer's legitimate interest in managing their business and limiting no-shows.

This indicator is calculated at two levels: for a single booking site, and across all sites belonging to the SAME organizer account (for example, the locations of one chain). It is never shared with another Votanza account or with a third party.

This is a signal reviewed by the organizer, never an automated decision — see "What Votanza does not do" above.

User account: for as long as the service is used, then twelve months after the last sign-in, after which the account is deleted.

Polls, lists, events and booking pages: until deleted by their author, or twelve months after the deletion of the account that holds them.

Participants' answers: they follow the fate of the item they belong to.

Accounting records and invoices: ten years, in accordance with Article L.123-22 of the French Commercial Code.

Message queue: sent messages are purged after thirty days; failures are kept for as long as diagnosis requires.

Security logs: twelve months at most.

Data is accessible only to authorised staff of the publisher and to the processors listed below, all bound by a contract compliant with Article 28 GDPR.

Vercel Inc. — application hosting, United States, covered by the European Commission's standard contractual clauses.

Supabase Inc. — database, in a region located within the European Union.

o2switch — message delivery, France.

Stripe Payments Europe, Ltd. — payment processing, Ireland.

Google Ireland Limited — Google account sign-in and calendar synchronisation, for those users who enable them, Ireland.

This list names only the providers actually in service. It is updated whenever it changes.

Application hosting involves a transfer to the United States. It is covered by the standard contractual clauses adopted by the European Commission on 4 June 2021, supplemented by the provider's technical measures.

The other processors handle data within the European Union.

You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to give instructions concerning your data after your death.

Where processing rests on your consent, you may withdraw it at any time; withdrawal does not affect what was done beforehand.

These rights are exercised from your account settings, or by email to privacy@votanza.com. You will receive an answer within one month, extendable by two months if the request is complex.

Deleting your account from your settings erases your data according to the periods set out above, except for records the law requires us to keep.

If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the French data protection authority.

CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

Votanza sets no advertising cookie and no third-party analytics tracker. No consent banner is therefore necessary.

Only items strictly necessary to the service are used, exempt from consent under Article 82 of the French Data Protection Act: the session cookie that keeps you signed in, the token that protects against request forgery, the memory of your language and of your light or dark theme, and local storage that keeps a draft as you type so that it is not lost.

You can clear these items at any time from your browser settings; being signed out and losing drafts is the normal consequence.

Traffic is encrypted in transit. Passwords are stored as hashes computed with a slow derivation function, never in clear text. Database access is restricted to the application's own components.

No measure makes a system impregnable. In the event of a data breach likely to result in a high risk to your rights, you will be informed in accordance with Article 34 GDPR.

The service is not intended for people under the age of fifteen. No account should be created below that age without the authorisation of the holder of parental responsibility.

Any account identified as belonging to a minor under fifteen without such authorisation is deleted.

This policy may change, in particular if a processor changes or if a new feature involves new processing.

The date of the last update appears at the top of the page. Any substantial change is brought to your attention by a message or by information visible within the service.