Privacy Policy
This policy explains how we process your personal data and how cookies/trackers work.
1. Data controller
- Controller: Sicomia
- Address: 2 TER ROUTE DE VILLECHAVANT, 89150, VILLEBOUGIS
- Contact: contact@sicomia.com
- DPO: Not appointed.
2. Processed data
Depending on your use of the website and/or service, we may process:
- Identification data (first name, last name), contact details (email) and company.
- Account data (credentials, technical logs related to security).
- Billing data (address, billing history, payment references via a service provider — we do not store card numbers).
- Service usage data (features used, event logs).
- Data imported by the user (e.g. catalog CSV files) — depending on product configuration.
- Exchanges with our support team (messages, attachments).
- Technical data (IP address, logs, device and browser).
- Browsing data (cookies/trackers depending on consent).
- Data related to anti-spam protection (reCAPTCHA).
The data comes directly from you, from your company, or from the platforms you connect or from which you import data (e.g. Shopify).
3. Purposes and legal bases
| Purpose | Legal basis | Examples |
|---|---|---|
| Handling requests (contact) | Legitimate interest / Pre-contractual measures | Answering requests and follow-up |
| Account creation and management | Performance of the contract | Dashboard access, support, security |
| Providing the service (AI modules) | Performance of the contract | CSV processing, recommendation generation |
| Billing | Legal obligation / Contract | Payments, supporting documents |
| Support and customer relationship | Contract / Legitimate interest | Assistance and follow-up |
| Security and fraud prevention | Legitimate interest | Logs, anomaly detection |
| Audience measurement / analytics | Consent (cookies) | Visit statistics |
| Marketing (newsletter) | Consent (or legitimate interest in B2B) | Sending product information |
We do not make automated decisions that produce legal effects. Recommendations from AI modules are decision-support tools.
4. Mandatory nature of data
Fields marked as mandatory are necessary to process your request or perform the contract. Failing that, we will not be able to respond or provide the service. The phone number is optional.
5. Recipients and processors
Your data may be accessible to:
- Authorised internal teams.
- Our technical providers (hosting, emailing, payment, support), acting as processors.
- Competent authorities when required by law.
Main providers
- Hosting: OVHcloud (France/EU)
- Anti-spam: Google reCAPTCHA (Ireland/United States)
- Emailing: Brevo
- Communication: Twilio
- Audience measurement: Google Analytics 4 (GA4) and Google Tag Manager (GTM)
- Payment: Stripe
- AI: Mistral AI
This list may evolve according to service needs. This policy will be updated accordingly.
6. Transfers outside the EU
Some providers may process data outside the European Union. In that case, we ensure that appropriate safeguards are put in place (standard contractual clauses, adequacy decisions, or equivalent measures).
7. Retention periods
- Contact/prospect data: for the time necessary to process the request, then archived for evidence of the exchange.
- Customer account: for the duration of the contractual relationship, then legal archiving.
- Billing: for the applicable legal period.
- Support: for the duration of ticket handling, then limited archiving.
- Security logs: for a period proportionate to the security purpose.
- Cookies: depending on the category (see Cookie Policy).
8. Security
We implement appropriate technical and organisational measures: access control, encryption in transit, logging, backups, environment segregation, etc.
9. Your rights
You notably have the rights of access, rectification, erasure, restriction, objection, portability (where applicable), and the right to withdraw your consent at any time where processing is based on consent.
Exercise of rights: contact@sicomia.com.
You may also lodge a complaint with the CNIL.
10. Cookies / trackers
Non-essential cookies are only set after consent. For more information, please see our Cookie Policy.
11. Processing on behalf of customers
When you import data into the Service (e.g. product catalogs), Sicomia acts as a processor on your behalf. Processing is carried out in accordance with your instructions. A data processing agreement can be provided on request.
12. Updates
We may change this policy, notably in the event of legal, technical or product developments.