This Privacy Policy describes how FINERIS (a trade name operated by Eterstain SAS, headquartered at 22 rue Gabriel Péri, 92250 La Garenne-Colombes, France) collects, uses, stores, and protects your personal data when you use the website www.fineris.co and our associated services.
1. Data Collected
We collect the following categories of personal data:
- Identification Data: name, surname, email address, phone number
- Professional Data: company name, company registration number (e.g., SIRET), sector, headcount, location, export objectives, product categories
- Technical and Usage Data: IP address, browser type, operating system, pages visited, time spent, referring URL
- Form Responses: data submitted through online forms such as Typeform questionnaires
- Analytics Data: via tools such as Matomo, Supabase, and potentially Google Analytics
- Google Account and Gmail Data: when a user explicitly connects a Google account, we may process Google account information, Gmail metadata, and, where required for the requested functionality, limited email content to enable outreach, email workflow automation, and related user-requested features
2. Purpose of Processing
Your data is processed for the following purposes:
- To deliver and improve our export intelligence platform and services
- To identify qualified international buyers and export opportunities for your products
- To generate market analysis reports and export strategy recommendations
- To respond to your requests or inquiries
- To contact you about relevant export opportunities, market insights, or service updates
- To fulfill legal obligations, including Know-Your-Customer (KYC) procedures and international trade compliance
- To provide Gmail-connected features requested by the user, including email workflow automation, outreach assistance, conversation analysis, reply handling, and related functionality
3. Legal Basis for Processing
We rely on the following legal bases:
- Performance of a contract or pre-contractual measures (Article 6.1.b GDPR)
- Legal obligation (Article 6.1.c GDPR) for compliance with administrative or financial regulations
- Legitimate interest (Article 6.1.f GDPR) for service improvement and fraud prevention
4. Data Retention
- Client data: retained for the duration of the contractual relationship and up to 5 years thereafter for legal and accounting purposes
- Prospect data: retained for up to 3 years from the last contact
5. Data Sharing and Transfers
Your data may be shared with:
- Hosting providers (e.g., Vercel, Supabase)
- CRM and email marketing tools
- Payment processors and accounting software
- Legal or regulatory authorities when required
No transfer outside the European Economic Area (EEA) occurs unless adequate safeguards (e.g., SCCs) are in place.
6. Google User Data and Sensitive Data Protection
If you choose to connect your Google account to Fineris, we may access certain Google user data, including Gmail data, strictly to provide the features requested by the user, such as email outreach workflows, conversation support, and related automation features.
Fineris' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- We request only the minimum scopes necessary to provide the relevant functionality and only process Google user data for the specific user-facing features enabled by the user.
- We do not sell Google user data and do not use Google user data for advertising, ad targeting, profiling, or marketing to third parties.
- We protect sensitive data, including Google user data, through appropriate technical and organizational measures, including encryption in transit, encryption at rest, access controls limited to authorized personnel and systems, logging and monitoring of privileged access, and periodic review of retention and access practices.
- We do not allow humans to read Google user data except with the user's affirmative agreement for support or troubleshooting, when required for security purposes such as investigating abuse, when required by applicable law, or when the data has been aggregated and anonymized.
- Google user data is retained only for as long as necessary to provide the enabled service or comply with legal obligations. Users may request deletion of associated data at any time by contacting [email protected] and may revoke Fineris' access to their Google account at any time through their Google account permissions.
- Google user data is not used to train general-purpose artificial intelligence or machine learning models.
7. Your Rights
Under GDPR, you may:
- Access your data
- Request correction or deletion
- Object to processing
- Restrict processing in certain circumstances
- Request data portability
- Withdraw your consent at any time (for consent-based processing)
- File a complaint with the French data protection authority (CNIL)
You can exercise your rights by contacting [email protected].