This policy describes how Emansy ("we") collects, uses and protects the personal data of users of the app.emansy.fr application and the emansy.fr website. We are committed to processing your data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (Informatique et Libertés).
1. Data controller
The data controller is ⟦NAME — e.g. Xavier Delacour⟧, a sole trader (French micro-entreprise), whose address is ⟦ADDRESS⟧, registered under SIRET number ⟦SIRET⟧.
For any question regarding your personal data, you can contact us at: privacy@emansy.fr.
2. Data we collect
We only collect the data necessary for the service to function:
- Account data: email address, name, password (encrypted), managed via Amazon Cognito.
- Activity data: bookings, sessions, gift vouchers, revenue that you enter or import.
- Payment data: processed by our providers Stripe and Stancer. We never store your card numbers.
- Data imported from platforms: booking metadata from Wecandoo, Funbooker, GetYourGuide and other platforms you connect.
- Technical data: aggregated and anonymous audience statistics (see section 7).
3. Google API user data
When you connect your Gmail account to automatically import your booking notifications, Emansy requests the https://www.googleapis.com/auth/gmail.readonly (read-only) scope. This authorization is used exclusively to:
- List messages from a restricted list of known senders (booking platforms such as Funbooker and GetYourGuide).
- Read those specific messages in order to extract booking metadata (date, customer name, workshop title).
Emansy never does the following:
- Send, modify, archive or delete emails via the Gmail API.
- Store the raw content of emails — only structured booking metadata is retained.
- Share your Google data with a third party.
- Use your Google data for advertising, model training or any purpose other than consolidating bookings for the user.
You can disconnect your Gmail account at any time from the Settings page. Disconnecting revokes the access token and stops any further reading. Bookings already imported remain in your dashboard, but no new email is read.
Emansy's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. Purposes and legal basis
- Performance of the contract: providing the service you subscribe to (bookings, widget, analytics).
- Legitimate interest: securing and improving the service.
- Consent: Gmail connection, which you grant explicitly and can withdraw at any time.
- Legal obligation: retention of billing data.
5. Subprocessors and hosting
Your data is hosted on Amazon Web Services (Europe region, Paris — eu-west-3). We use the following subprocessors:
- Amazon Web Services — hosting and database (EU).
- Stripe and Stancer — payment processing.
- Google — only if you connect Gmail (read-only).
6. Retention period
Your data is retained as long as your account is active. Upon deletion of your account, it is erased within 30 days, except for data we are legally required to retain (invoices: 10 years).
7. Audience measurement
We measure the audience of emansy.fr with a privacy-friendly tool, without cookies and without collecting identifying personal data. The statistics are aggregated and anonymous: no individual profile is built, no data is shared for advertising purposes, and therefore no consent banner is required.
8. Your rights
In accordance with the GDPR, you have the right to access, rectify, erase, port, object to and restrict the processing of your data. You can exercise these rights by writing to privacy@emansy.fr. You also have the right to lodge a complaint with the CNIL (cnil.fr).
9. Security
Data is encrypted in transit (TLS) and at rest. Access tokens and sensitive keys are stored in a secure vault (AWS Secrets Manager). Access to production data is restricted and logged.
10. Changes
We may update this policy. Any substantial change will be notified to you by email or via the application. The date of the last update appears at the top of this page.