Data processing agreement

1. The parties

• You: the person or organization holding the Fondacle account.
• Fondacle: [nom de la société, forme, numéro SIRET, adresse du siège — à compléter].

2. What Fondacle does with the data

Fondacle processes the data only to provide you with the service:

• read your call transcripts and suggest follow-up updates (tasks, decisions, steps, profile);
• display and keep this follow-up, share it with your clients through their follow-up link, prepare your recaps and calls;
• answer your questions in "Ask AI";
• send the emails you've chosen (recaps, reminders), when sending is turned on.

Using the app counts as instruction. Fondacle doesn't sell your data, doesn't use it for its own advertising, and doesn't use it for anything other than the service. The only figures kept beyond that are global, anonymous statistics, with no call content or information that could identify a person.

3. The data and the people concerned

• Your clients: name, contact details, call content and transcripts, goals, tasks, decisions, shared documents, answers in their follow-up link.
• You and your team: name, email address, account usage.

Fondacle is not a certified health data host (HDS): you commit to not storing any health data in it. You get your clients' consent before recording a call.

4. How long

• As long as your account exists, or until you delete a client (their whole file is then erased, in one step).
• Transcripts received from your tools and never linked to a client are erased after 30 days.
• When the account is deleted, everything is erased immediately; encrypted backups disappear on their own within 7 days.

5. Confidentiality and security

• Only the people who need it to run the service have access, and they are bound to confidentiality.
• Encrypted connections (HTTPS); each workspace is isolated from the others by the database itself; two-factor sign-in available.
• Access to your connected tools is encrypted; no call content is written to technical logs; stored errors are cleaned of emails and personal links.
• A full, encrypted backup is made every night and kept for 7 days.

6. Fondacle's providers

Fondacle uses a few providers (hosting, database, AI, backup, email), all bound by the same commitments as Fondacle. Their up-to-date list is in the terms of use. Any addition or change is announced to you 30 days in advance; if you object, you can stop your subscription and retrieve your data.

Data is kept in the European Union (except the nightly backup, encrypted before sending). When a provider is a company outside the European Union, the transfer is covered by the European Commission's standard contractual clauses or the Data Privacy Framework.

7. Your clients' rights

Fondacle gives you the means to respond to their requests: full export of a file (PDF, spreadsheets, data file) or of the whole account, correction of any information, permanent deletion of a file. If a request reaches Fondacle directly, it's passed on to you without delay.

8. In case of an incident

If data is lost, stolen or accessed without right, Fondacle notifies you without delay, and no later than 48 hours after learning of it, with what happened, the data concerned and what is being done. You can then notify the data protection authority and the people concerned if necessary.

9. Audits

On request, Fondacle gives you the information needed to check compliance with this agreement, and answers your written questions.

10. At the end

Before leaving, you retrieve everything in one file (Settings › Your data › Download everything). When the account is deleted, Fondacle erases all data, except where the law requires keeping some (for example invoices).