Privacy policy
This policy describes the personal data processed by the tracito.com website and the Tracito app, why it is processed, how long it is kept, who has access to it and how to exercise your rights. It is written to be read in full in a few minutes.
1. Data controller
Christophe Contard EI
BP 3, 15400 Riom-ès-Montagnes, France
SIRET 500 901 442 00045
bonjour@tracito.com
The publisher has not appointed a data protection officer; the address above receives all requests.
2. Two distinct roles
Tracito acts in two capacities, and it matters to tell them apart:
- Data controller for your account, your subscription, invoicing, e-mail exchanges and website traffic.
- Data processor for the data your establishment enters in the app (readings, cleaning plan, team members' first names, suppliers, photos of documents). The controller of that data is the establishment's operator: they decide what to record, who may access it and when to delete it. Tracito hosts and processes it on their behalf and on their instructions.
3. Data collected
Account
E-mail address, display name, technical identifier and, if you sign in with Google, the identifier and profile picture Google passes on. Tracito stores no password: authentication is handled by Firebase Authentication (Google).
Establishment
Name, address and settings of the establishment (units, zones, thresholds, frequencies), first names of team members as entered by the manager. Employees have no account: only a first name identifies who took a reading.
HACCP records
Temperatures, delivery checks, cooling, frying oil, use-by dates, cleaning tasks, corrective actions, with the date, time and first name of the person, plus any photos of documents (delivery notes, labels) you choose to attach.
Subscription and billing
Payment is handled by Stripe. Tracito neither sees nor stores your card number: it only receives the subscription status (active, trialling, cancelled), the Stripe customer identifier and the invoices. Stripe collects, on its own behalf, the data required for payment and fraud prevention.
Website and e-mails
The website server keeps technical logs (IP address, page requested, browser, date). The e-mails we send you (confirmation, invoice, reply to a request) go through Mailgun; those you send us are received on our own server.
Newsletter
If you subscribe to the newsletter, we keep your address, the chosen language, the date and IP address of the subscription and of its confirmation (proof of consent). Every issue contains an unsubscribe link, effective immediately.
AI-powered help
In the app, the help can be queried in natural language. The questions asked, with the matching help articles and the previous exchanges of the same conversation, are sent to a language-model provider to produce the answer (see section 6). Neither your name, nor your records, nor your establishment's data are sent: only the text of your questions.
4. Why, and on what basis
| Purpose | Legal basis |
|---|---|
| Create and manage your account, run the app, sync the tablet | Performance of the contract |
| Bill the subscription, issue and keep invoices | Performance of the contract and legal obligation (accounting) |
| Answer your requests, inform you of a change to the service | Legitimate interest (customer relationship) |
| Keep the website and app secure, detect abuse | Legitimate interest (security) |
| Send you the newsletter | Consent (subscription confirmed by e-mail, withdrawable at any time) |
| Answer your questions in the app's help | Performance of the contract |
| Host and process your establishment's records | Instructions of the establishment (Tracito as processor) |
No data is sold, rented or used for advertising. No automated decision with legal effects is made.
5. Retention periods
- Account and establishment: as long as the account exists. When the establishment or the account is deleted, the data is removed from the live database; it remains in backups for at most 30 days.
- HACCP records: as long as the establishment exists. Food safety regulations require you to keep your records; export them before deleting the establishment.
- Invoices: 10 years (accounting obligation).
- Server logs: 12 months.
- E-mail exchanges: 3 years after the last contact.
- Newsletter: until you unsubscribe; a subscription never confirmed is deleted after 30 days.
- Photos and files uploaded in the app (traceability, cleaning proofs, delivery notes, documents, logo): as long as the establishment exists, in a storage space reserved to the establishment.
- Questions asked to the help and the assistant: the text of questions and answers (last ten exchanges of a conversation) is deleted after 30 days; only technical metrics (number of calls, cost) are kept, without the content. The same applies to images sent for label reading and to the internal audit answers sent to the model.
- Notification tokens (manager's phone): until notifications are disabled or the device signs out.
- Exports (ZIP archive and PDF file generated on request): link valid 7 days, files deleted after 30 days.
6. Who has access to the data
The publisher alone, to run the service. And the following processors, each for the part that concerns it:
| Processor | Role | Processing location |
|---|---|---|
| Google Cloud / Firebase (Google Ireland Ltd) | Authentication, database, storage of photos and files, server functions and notifications of the app | European Union, Paris region (europe-west9) |
| Stripe (Stripe Payments Europe Ltd, Dublin) | Subscription payment, invoices | European Union; transfers governed by Stripe |
| Mailgun (Sinch) | Sending the service's e-mails | European Union (EU region) |
| OVH SAS (Roubaix) | Hosting of the tracito.com website | France |
| Artificial-intelligence model providers (currently Google Gemini — Google Ireland Ltd, Dublin — and OpenAI — OpenAI Ireland Ltd, Dublin) | Help assistant, reading of photographed labels, internal audit mini-report | European Union and United States; the content sent is not used to train models |
When one of these providers transfers data outside the European Union (for instance for technical support), it does so under the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.
Data may also be disclosed to an authority requesting it under the conditions provided by law.
7. Security
Exchanges with the website and the app are encrypted in transit (HTTPS/TLS); data and files are encrypted at rest by the host. App data is protected by access rules that restrict each establishment to its own data: only its members (accounts and paired tablets) can access it. Kitchen tablets are devices paired with a code, without a password, which the manager can revoke at any time from the settings. Administration access is reserved to the publisher and password-protected. In the event of a data breach likely to affect you, you will be informed within the time limits set by the GDPR.
You can export all your registers at any time from the app's inspection mode (complete PDF file and ZIP archive with photos, over the period of your choice). Deleting the establishment from the app erases, within minutes and server-side, the database, the files and the tablet accounts.
8. Cookies and local storage
The website and the app use no advertising tracker and no third-party audience measurement, hence no consent banner: only strictly necessary cookies, exempt from consent, are stored in your browser:
- A session cookie and an anti-forgery token, required for the website to work (sign-in, form protection). They expire when the browser is closed or after two hours of inactivity.
- When you sign in, Firebase Authentication keeps your session in browser storage for as long as you stay signed in.
Some blog pages may embed a YouTube video in “no cookie” mode: YouTube stores nothing until you start playback.
9. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to set directives on what happens to it after your death. To exercise them, write to bonjour@tracito.com from your account's e-mail address; you will receive a reply within one month.
Most data can be edited or exported directly from the app (settings, register export) and from your account area (subscription, invoices).
If you are a member of an establishment's team and your first name appears in records, contact the establishment's operator first, as the controller of that data; we will assist them if needed.
You may also lodge a complaint with the French data protection authority (CNIL, 3 place de Fontenoy, 75007 Paris, www.cnil.fr) or with the supervisory authority of your country.
10. Changes
This policy may evolve with the service. The online version prevails; in the event of a significant change, account holders will be informed by e-mail.