Privacy Policy

Zoplee is a quote and invoice platform for building tradespeople, published by Zoplee (SIRET 10144222600011) (the “data controller”). Contact: privacy@zoplee.io

Account data: e-mail, name, company name, SIRET, address, phone number, logo. Activity data you enter: your clients (names, contact details, site addresses), your quote requests (text, voice recordings, photos), quotes, invoices, payments received, commercial terms. Usage data: application usage statistics (screens viewed, actions), technical data (device model, application version, error logs). During your first 5 uses of the mobile app, a recording of the screen (screens and taps) helps us make the app simpler; every input field and image is masked. Payment data: processed exclusively by our provider Stripe; we never store your card numbers. Ad measurement (mobile app): anonymous events (install, sign-up, subscription), without any advertising identifier, see section 10.

— Providing the service (generating your quotes and invoices from your requests): performance of the contract. — Managing your account, trial and subscription: performance of the contract. — Improving quote and service quality (usage analysis, error correction): legitimate interest. — Sending you service e-mails (verification, end of trial, invoices): performance of the contract. — Sending you commercial communications: consent (unsubscribe at any time). — Accounting and tax obligations: legal obligation. — Measure how well our ads work, anonymously (knowing that an install, a sign-up or a subscription came from an ad): legitimate interest.

The preparation of your quotes relies on automated processing of your requests. Every quote remains editable and is validated by you before being sent to your client: no decision producing legal effects concerning you is made in an exclusively automated way.

For the data of your own clients that you enter into Zoplee, you are the data controller and Zoplee acts as a processor (Article 28 GDPR): we use it only to provide the service to you and never share it with anyone else.

Your data is processed by limited categories of processors, under contracts compliant with Article 28 GDPR: — Platform hosting and processing: providers located in France (EU). — Payments and subscriptions: Stripe (EU — Stripe Payments Europe); your card data never passes through our servers. — E-mail delivery: provider located in France. — Transcription of voice requests: provider located in the United States (see below). — Audience measurement: provider hosted in the European Union. — E-invoicing: Super PDP, a platform approved by the French tax administration, located in France, if you turn e-invoicing on. — Ad measurement (mobile app, anonymous): Meta Platforms Ireland Ltd. We never sell your data. Transfers outside the EU: the transcription of voice requests (audio content only), governed by standard contractual clauses (SCCs) in accordance with Articles 44 et seq. GDPR; recordings are deleted no later than 30 days after transcription. If you do not want this transfer, use text input — voice dictation is optional. The detailed list of processors is available on request at privacy@zoplee.io. Meta may process the anonymous ad-measurement events in the United States, under the EU-US Data Privacy Framework.

— Account and activity data: for the duration of the contract, then 3 years after account closure (prospecting/litigation), unless you request earlier deletion. — Quotes and invoices: 10 years (accounting obligation, Art. L123-22 French Commercial Code). — Voice recordings: deleted no later than 30 days after transcription. — Technical logs: 12 months.

You have the rights of access, rectification, erasure, restriction, objection and portability over your data. To exercise them: privacy@zoplee.io (response within one month). Complaints: CNIL (cnil.fr).

Encryption in transit (TLS) and at rest, strict account isolation (each tradesperson accesses only their own data), restricted access, daily encrypted backups, hosting in France.

To know whether our Facebook and Instagram ads work, the app tells Meta, anonymously, that an install, a sign-up or a subscription came from an ad. No device advertising identifier is collected. On iPhone, measurement goes through Apple's anonymous system (SKAdNetwork); on Android, through the ad code Google Play passes on at install. Your quotes, clients and work data are never shared. You can object at any time by writing to privacy@zoplee.io.

The website uses cookies necessary for operation (session, language, theme). With your consent, it also uses Google Ads cookies (Google Ireland Limited) to measure whether our ads lead to a visit of the App Store or Google Play pages. Without your consent, none of these cookies is set and nothing is sent to Google. You can change your mind by clearing the site data in your browser. The mobile application does not use cookies.

Any substantial change to this policy will be notified to you by e-mail or in the application at least 15 days before it takes effect.