1. Introduction
KeyQo, publisher of the keyqo.io platform, is committed to protecting the privacy of its users. This privacy policy describes how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).
2. Data Controller
The data controller for personal data is KeyQo, headquartered in France.
DPO Contact: contact@keyqo.io
3. Data Collected
We collect the following categories of data:
3.1 Identification Data
- First and last name
- Email address
- Phone number
- Company name
- Job title/position
3.2 Connection Data
- IP address
- Connection logs
- Browser and device type
- Operating system
3.3 Usage Data
- Pages visited
- Actions performed on the platform
- Session duration
- Analytics data via Google Analytics 4
3.4 Professional Data
- Information about created events
- Exhibitor data
- Booking history
4. Processing Purposes
Your data is collected for the following purposes:
- Service provision: creation and management of your account, access to platform features
- Customer relationship management: responding to your requests, technical support, important notifications
- Billing: invoice issuance, payment management
- Service improvement: usage analysis, aggregated statistics, bug detection
- Communication: sending newsletters (with consent), update information
- Security: fraud prevention, protection against unauthorized access
- Legal obligations: compliance with accounting and tax obligations
5. Legal Bases
Data processing is based on the following legal bases:
- Contract performance: processing necessary for service provision
- Consent: for non-essential cookies, newsletters, marketing analytics
- Legitimate interest: service improvement, security, fraud prevention
- Legal obligation: retention of billing data
6. Data Recipients
Your data may be transmitted to the following recipients:
- KeyQo Team: authorized personnel for service management
- Technical subcontractors: hosting provider (OVH, France), payment providers
- Google Analytics: for audience analysis (anonymized data)
- Authorities: upon legal request only
We never sell your personal data to third parties.
7. Transfers Outside the EU
The use of Google Analytics may involve data transfers to the United States. These transfers are governed by the European Commission's standard contractual clauses and the Data Privacy Framework.
Our main servers and databases are hosted in France by OVH.
8. Retention Period
Data is retained according to the following periods:
- Account data: during the subscription period + 3 years after closure
- Billing data: 10 years (legal obligation)
- Connection logs: 12 months
- Analytics data: 14 months (Google Analytics)
- Prospecting data: 3 years after last contact
9. Your Rights
In accordance with the GDPR, you have the following rights:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate data
- Right to erasure: request deletion of your data
- Right to restriction: restrict the processing of your data
- Right to portability: receive your data in a structured format
- Right to object: object to the processing of your data
- Right to withdraw consent: withdraw your consent at any time
To exercise your rights, contact us at: contact@keyqo.io
You also have the right to lodge a complaint with the CNIL (French Data Protection Authority) or your local supervisory authority.
10. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Data encryption in transit (HTTPS/TLS)
- Encryption of sensitive data at rest
- Access control and enhanced authentication
- Regular backups
- Regular security updates
- Monitoring and intrusion detection
11. Cookies
Our use of cookies is detailed in our Cookie Policy.
12. Changes
We reserve the right to modify this privacy policy. In case of substantial changes, you will be notified by email or notification on the platform.
13. Contact
For any questions regarding this privacy policy or your personal data, contact us at: contact@keyqo.io