Privacy Policy

1. Introduction and data controller identity

This policy is established under Regulation (EU) 2016/679 (GDPR) and French Data Protection Act No. 78-17 of 6 January 1978, as amended.

• Trade name: SystimaNX
• Legal form: Sole proprietorship
• SIRET: 831 723 267 00025
• EU VAT number: FR13831723267
• NAF/APE code: 6201Z - Computer programming
• Creation date: 20 November 2024
• Website: https://facturzen.com/
• Contact: support@facturzen.com

2. Data collected and legal bases

We only collect data strictly necessary to provide our services, under Article 6 GDPR legal bases:

• Identity data (name, email, phone): contract performance
• Property-related data: contract performance
• Usage data: legitimate interest
• Technical data (IP, browser, device): legitimate interest
• Billing data: legal obligation / contract performance
• Marketing communications (promotional emails, newsletters): consent (Art. 6.1.a GDPR) — revocable at any time via the unsubscribe link in every email or in your account settings
• Prospect data (free lease generator): explicit consent collected at the point of data collection

3. Processing purposes

• Provide, maintain, and improve the FacturZen platform
• Manage your account and authenticate access
• Process transactions and billing
• Send service communications (notifications, updates)
• Respond to support requests
• Comply with legal/accounting obligations (10-year retention where applicable)
• Improve security and prevent fraud

We do not sell your personal data to third parties.

4. Data recipients and sub-processors

Your data may be shared with the technical sub-processors listed below, strictly for their mission under GDPR Article 28 processing agreements. No data is shared for commercial resale.

DPF = EU–US Data Privacy Framework (adequacy decision). SCCs = Standard Contractual Clauses.

5. Retention periods

• Account data: contract duration, then 3 years after last interaction
• Billing and accounting documents: 10 years
• Navigation data and technical logs: up to 12 months
• Prospect data (free lease generator): up to 24 months from collection, then automatically deleted

6. Data security

We implement technical and organizational measures under Article 32 GDPR, including encryption in transit (TLS) and at rest, access controls, access logging, regular backups, and incident response procedures.

If a personal data breach is likely to risk your rights and freedoms, we notify CNIL within 72 hours under Article 33 GDPR, and inform you when required.

7. Your rights

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to restriction (Art. 18 GDPR)
• Right not to be subject to automated decisions (Art. 22 GDPR)

Portability: you can download a copy of your data (profile, properties, tenants, leases, payments) as a JSON file directly from My account > Your personal data in the application — no need to contact us.

Marketing unsubscribe: every marketing email contains a one-click unsubscribe link. You can also withdraw consent at any time from your account settings.

To exercise any other right, contact support@facturzen.com. We respond within one month (extendable by two months for complex requests).

You have the right to lodge a complaint with the CNIL — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — or via the online form at cnil.fr.

8. Cookies and trackers

In line with CNIL recommendations (17 September 2020), we request consent before placing non-essential cookies. You can manage preferences anytime through our cookie banner on https://facturzen.com/.

9. Policy updates

We reserve the right to modify this policy. If changes are substantial, you will be informed by email or a visible notice on the platform before they take effect.

10. Contact

For questions about this policy or to exercise your rights: support@facturzen.com - https://facturzen.com/