Privacy

Privacy Policy

Last updated : December 28, 2025

1. Introduction

KeyQo, publisher of the keyqo.io platform, is committed to protecting the privacy of its users. This privacy policy describes how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).

2. Data Controller

The data controller for personal data is KeyQo, headquartered in France.

DPO Contact: contact@keyqo.io

3. Data Collected

We collect the following categories of data:

3.1 Identification Data

First and last name
Email address
Phone number
Company name
Job title/position

3.2 Connection Data

IP address
Connection logs
Browser and device type
Operating system

3.3 Usage Data

Pages visited
Actions performed on the platform
Session duration
Analytics data via Google Analytics 4

3.4 Professional Data

Information about created events
Exhibitor data
Booking history

4. Processing Purposes

Your data is collected for the following purposes:

Service provision: creation and management of your account, access to platform features
Customer relationship management: responding to your requests, technical support, important notifications
Billing: invoice issuance, payment management
Service improvement: usage analysis, aggregated statistics, bug detection
Communication: sending newsletters (with consent), update information
Security: fraud prevention, protection against unauthorized access
Legal obligations: compliance with accounting and tax obligations

5. Legal Bases

Data processing is based on the following legal bases:

Contract performance: processing necessary for service provision
Consent: for non-essential cookies, newsletters, marketing analytics
Legitimate interest: service improvement, security, fraud prevention
Legal obligation: retention of billing data

6. Data Recipients

Your data may be transmitted to the following recipients:

KeyQo Team: authorized personnel for service management
Technical subcontractors: hosting provider (OVH, France), payment providers
Google Analytics: for audience analysis (anonymized data)
Authorities: upon legal request only

We never sell your personal data to third parties.

7. Transfers Outside the EU

The use of Google Analytics may involve data transfers to the United States. These transfers are governed by the European Commission's standard contractual clauses and the Data Privacy Framework.

Our main servers and databases are hosted in France by OVH.

8. Retention Period

Data is retained according to the following periods:

Account data: during the subscription period + 3 years after closure
Billing data: 10 years (legal obligation)
Connection logs: 12 months
Analytics data: 14 months (Google Analytics)
Prospecting data: 3 years after last contact

9. Your Rights

In accordance with the GDPR, you have the following rights:

Right of access: obtain a copy of your personal data
Right to rectification: correct inaccurate data
Right to erasure: request deletion of your data
Right to restriction: restrict the processing of your data
Right to portability: receive your data in a structured format
Right to object: object to the processing of your data
Right to withdraw consent: withdraw your consent at any time

To exercise your rights, contact us at: contact@keyqo.io

You also have the right to lodge a complaint with the CNIL (French Data Protection Authority) or your local supervisory authority.

10. Data Security

We implement appropriate technical and organizational measures to protect your data:

Data encryption in transit (HTTPS/TLS)
Encryption of sensitive data at rest
Access control and enhanced authentication
Regular backups
Regular security updates
Monitoring and intrusion detection

11. Cookies

Our use of cookies is detailed in our Cookie Policy.

12. Changes

We reserve the right to modify this privacy policy. In case of substantial changes, you will be notified by email or notification on the platform.

13. Contact

For any questions regarding this privacy policy or your personal data, contact us at: contact@keyqo.io