Data protection

Privacy policy

This is an English translation of our privacy policy, provided for information. In case of discrepancy, the French version prevails.

This policy describes the personal data processed by ElectroniSafe when you use the electronisafe.cloud website, why we process it, how long we keep it and what your rights are. It applies to the website and its forms, and to the licence, trial, online purchase and updates of the IA‑N Analyse plugin (section 10). It is written in accordance with Articles 12 to 14 of Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

1. Data controller

ELECTRONISAFE, SAS with share capital of €2,500, RCS Chambéry 924 849 540, 3706 rue du Grand‑Mont, 73540 La Bâthie, France. Represented by Mathieu Delannoy, President.

Contact for any question about your data: contact@electronisafe.fr, subject “Données personnelles” (personal data). ElectroniSafe has not appointed a data protection officer; requests are handled directly by the management.

2. What data, for what purpose, for how long

Processing	Data	Purpose and legal basis	Retention
Contact forms (demo, box availability, question)	Name, company (optional), email, phone (optional), subject of the request, message	To answer your request and, where relevant, prepare a business relationship. Pre-contractual measures (Art. 6(1)(b)) and legitimate interest in business follow-up between professionals (Art. 6(1)(f)).	3 years after our last exchange, then deletion.
“Installer partner application” form	Name, company, email, phone (optional), business, area covered, annual volume of video surveillance projects (by range), message	To review your application and, where relevant, prepare a partnership. Art. 6(1)(b) and 6(1)(f). Your contact details are never published in a directory.	3 years after our last exchange, then deletion.
“Monitoring centre account request” form	Name, company, email, phone (optional), protocols used, message	Likewise: to process the connection request and prepare a partnership. Art. 6(1)(b) and 6(1)(f).	3 years after our last exchange.
IP address when a form is sent	IP address	Form security: limiting the number of submissions, protection against bots and abuse. Legitimate interest (Art. 6(1)(f)).	Anti-abuse counter purged automatically after one hour; server security logs kept for 6 months at most.
Server connection logs	IP address, page viewed, date and time, browser type	Security, incident detection, proper operation of the website. Legitimate interest (Art. 6(1)(f)).	6 months at most.
Audience measurement (Google Analytics)	Cookie identifier, pages viewed, device, origin of the visit, truncated IP address	To know how the website is visited. Only with your consent, given through the banner (Art. 6(1)(a) GDPR and Article 82 of the French Data Protection Act).	Cookie: 13 months. Measurement data: 25 months.
Email or phone exchanges following a request	Contact details, content of the exchanges	Follow-up of the business relationship. Legitimate interest (Art. 6(1)(f)).	3 years after the last exchange; statutory periods for contractual and accounting documents if a business relationship begins.

No data is collected without your knowledge: form fields are filled in by you, the IP address is sent by your browser, and audience measurement only starts after your consent. We do not carry out profiling or automated decision-making producing legal effects.

3. Who has access to your data

ElectroniSafe: the management and the sales team responsible for answering requests.
Hostinger International Limited (61 Lordou Vironos Street, 6023 Larnaca, Cyprus): hosting of the website and servers, located in Paris, France. Processor within the meaning of Article 28 GDPR.
LWS (Ligne Web Services, France): hosting of ElectroniSafe's mail server, which receives the requests sent through the forms. Processor within the meaning of Article 28 GDPR.
Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland): audience measurement, only if you have accepted cookies.
Google (YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland): playback of the presentation videos embedded in some pages. Nothing is loaded from YouTube until you click on a video; when you click, the video is played from youtube-nocookie.com and Google then receives, in particular, your IP address and technical information about your browser, which it may process outside the European Union under its own privacy rules.
Anthropic PBC (United States): assistance in drafting replies to our prospecting emails (see section 9).
Stripe Payments Europe, Limited (Ireland): card payment of IA‑N Analyse plugin licences. Processor for payment (see section 10).
PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg): PayPal payment of IA‑N Analyse plugin licences. Processor for payment (see section 10).

Your data is not sold, rented or transferred to third parties for marketing purposes.

4. Transfers outside the European Union

Forms, emails and logs are processed and hosted in the European Union. Replies to our prospecting emails may be sent to Anthropic, in the United States, for drafting assistance (see section 9). On the showcase website, the only possible transfer outside the EU concerns Google Analytics audience measurement, to the United States, if you have accepted it: it is covered by the adequacy decision on the EU–US Data Privacy Framework and by the European Commission's standard contractual clauses. For the online purchase of plugin licences (section 10): some payment data may be processed in the United States by Stripe, LLC, under the EU–US Data Privacy Framework and the European Commission's standard contractual clauses; PayPal may process some data outside the European Union within its group, with the safeguards of its binding corporate rules.

5. Your rights

You have the right to access, rectify and erase your data, to restrict its processing, to object and to data portability, as well as the right to give instructions about what happens to your data after your death. For audience measurement, you can withdraw your consent at any time by deleting the cookies from your browser; the banner will then be shown again.

To exercise your rights: contact@electronisafe.fr, subject “Données personnelles”, or by post to the registered office. We reply within one month. Proof of identity may be requested in case of reasonable doubt.

If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the CNIL (French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

6. Security

The website is served exclusively over HTTPS. The forms are protected against bots without any third-party tracker. Data is hosted in the European Union, on servers whose access is restricted to authorised persons. Request emails are routed through our own mail servers.

7. Cookies

Cookie	Role	Duration	Consent
Banner choice cookie	Remembers your answer to the banner	6 months	Not required (necessary for operation)
_ga, _ga_* (Google Analytics)	Audience measurement	13 months	Required, through the banner

8. What about the IA‑N box installed at our customers' premises?

This policy concerns the website. The IA‑N box analyses video surveillance images on site, at our customers' premises: the customer, as operator of the filmed site, is the controller of this processing. Recordings remain on the box or on the storage chosen by the customer (NAS, network share).

Some functions route images through ElectroniSafe's servers, hosted in France (Paris): remote viewing of live video and recordings, alarm verification by a monitoring centre (video link valid for 15 minutes), remote support, and Telegram notifications when the customer enables them. The alarm message sent to the monitoring centre (SIA DC‑09 or Contact ID) also passes through these servers. These images are not kept there: we only keep technical records (connection logs; for a monitoring alert: box, camera, type of detection and time). For these operations, ElectroniSafe acts as the customer's processor within the meaning of Article 28 GDPR.

Two services keep images on our servers:

Alarm verification API, for the monitoring centres that use it: the image or video sent is analysed on an ElectroniSafe server in France, then erased; the annotated photo of the result is kept for 90 days as evidence, then deleted.
Detection improvement programme, disabled by default: if the customer enables it, image thumbnails are sent to ElectroniSafe to train the detection model.

The data processing agreement (Article 28 GDPR) and the document templates intended for our customers (information sign, help with the record of processing activities) are being updated. For any question: contact@electronisafe.fr, subject “Données personnelles”.

9. Business prospecting

ElectroniSafe contacts security and video surveillance companies by email or phone to present its products. This section also concerns professionals who have never used the website.

Controller: ElectroniSafe SAS (contact details in section 1).
Purpose: to present our products to security and video surveillance professionals.
Data: company name, SIREN number, address, generic business email address and phone number published by the company.
Sources: the public SIRENE register of INSEE (the French national statistics institute) and the company's website.
Legal basis: ElectroniSafe's legitimate interest in making its products known to professionals (Article 6(1)(f) GDPR), in line with the CNIL's recommendations on business-to-business prospecting; our messages relate to the recipients' professional activity.
Retention: 3 years after the last contact. If you unsubscribe, sending stops immediately and the address is kept in an opposition list, solely so that you are not contacted again.
Assistance in drafting replies: when you reply to one of our messages, your reply may be analysed by an artificial intelligence tool (Claude, published by Anthropic PBC, United States) to prepare a draft answer. This draft is always reviewed and sent by a member of ElectroniSafe; no decision is taken automatically about you.
Transfers: the contact details collected remain in the European Union. Only the replies you send us may be transferred to Anthropic (United States) for drafting assistance, under the transfer mechanisms recognised by the GDPR (European Commission standard contractual clauses and/or the publisher's certification under the EU–US Data Privacy Framework).
Your rights: access, rectification, erasure and objection. To exercise them, reply “STOP” to one of our messages or write to contact@electronisafe.fr, subject “Données personnelles”. You can object to this analysis by saying so in your reply. You may also lodge a complaint with the CNIL (www.cnil.fr).

10. IA‑N Analyse plugin: licence, trial, purchase and updates

The IA‑N Analyse plugin is installed in our customers' video server. It analyses the images in the memory of that server, records none and sends none. For the analysis of the images, the customer who operates the filmed site is the controller. This section describes the only data that we receive for the plugin, as controller: ELECTRONISAFE SAS (see section 1).

10.1 Plugin licence

Data: the licence key, the number of cameras, hashed technical fingerprints of the server (unreadable codes computed from technical identifiers of the machine, never the hardware address of the network card), the versions of the video software and of the plugin. The activation log keeps a reduced network address and the masked key. No image, no video, no camera name.
Purposes and legal bases: activating and checking the licence (performance of the contract, Article 6(1)(b) GDPR); preventing a licence from being copied to another server (legitimate interest, Article 6(1)(f)).
Retention: for the duration of the rights; activation log: 12 months; link between the key and the server: erased 12 months after the end of the rights or the revocation.

10.2 Plugin trial

Data: trial requested on the website: company name, country, business e‑mail address, video server used. Trial requested from the video software (Nx): in addition, the versions of the video software and of the plugin, the server name if provided and hashed technical fingerprints of the server.
Purposes and legal bases: providing the trial (pre-contractual steps taken at your request, Article 6(1)(b)); checking the company and preventing trial abuse, with one trial per company, per e‑mail domain and per server (legitimate interest, Article 6(1)(f)); follow-up e‑mails during the trial (pre-contractual steps and legitimate interest; you can ask to stop receiving them by replying to the message).
Retention: request whose e‑mail is not confirmed: 72 hours; trial without purchase: 12 months after the end of the trial, then erased; only hashed and salted technical fingerprints (domain, company, server) are kept for 24 months to prevent a new trial.

10.3 Online purchase and subscription

Data: company, country, billing address, EU VAT number, SIREN or company registration number, business e‑mail address, video server used, record of the acceptance of the terms (date and time, document versions, truncated IP address, browser). We never receive your card details or your PayPal account details: you enter them directly at Stripe or at PayPal.
Purposes and legal bases: providing the licence, invoicing, managing the subscription, reminders (including the reminder 30 days before renewal) and support (performance of the contract, Article 6(1)(b)); keeping the accounts and the invoices (legal obligation, Article 6(1)(c)); checking the VAT number (European Commission VIES service) and the company (French SIRENE register) (legitimate interest, Article 6(1)(f)).
Card payment: Stripe. Stripe Payments Europe, Limited (Ireland) receives the e‑mail address, the company name and the amounts. It acts as our processor for payment processing and as a separate controller for its own obligations (fraud prevention, regulatory obligations), as described in its privacy policy. Some data may be processed in the United States by Stripe, LLC, which adheres to the EU–U.S. Data Privacy Framework; these transfers are also covered by the European Commission's standard contractual clauses included in Stripe's data processing agreement.
PayPal payment. If you choose PayPal, we send PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) your business e‑mail address, your company name, the subscription amount and its order reference. PayPal acts as our processor to carry out the payment and the yearly subscription, and as a separate controller for its own obligations (your PayPal account, fraud prevention, anti-money-laundering, banking obligations). No image or camera data is sent to it. We only keep the technical identifiers of the PayPal subscription and payments, with the invoices (10 years). PayPal may process some data outside the European Union within its group, with the safeguards of its binding corporate rules and of its privacy statement.
Retention: unpaid order: 30 days; customer: for the duration of the business relationship, then as long as legal obligations require; invoices and accounting records, paid order and record of acceptance of the terms: 10 years (Article L123‑22 of the French Commercial Code); sales activity log (without e‑mail address): 3 years; payment event log: 90 days; customer-area sign-in links: 30 minutes to 7 days; session: 12 hours.
Cookies: the customer area uses a single, strictly necessary technical session cookie. The sales and trial pages set no cookie and use no tracker.

10.4 Plugin updates

When the plugin checks whether a new version exists, it sends only the installed version and the platform (Windows or Linux). As for any web access, our server sees the connection IP address; it appears in the server's technical logs, kept for 6 months at most.
Purpose and legal basis: offering updates, including security fixes (performance of the contract, Article 6(1)(b), and legitimate interest in the security of the software, Article 6(1)(f)).

10.5 Plugin GDPR file

Data: at the installer's request, the plugin sends our portal the analysis configuration (number of cameras, functions and rules enabled, number of excluded zones, plate reading yes or no, retention periods, versions), with no image, no camera address or identifier, no person's name.
Purpose and legal basis: producing the site's GDPR documents (performance of the contract, Article 6(1)(b) GDPR).
Retention: the file is e‑mailed to the licence holder; it is erased from our servers 7 days after it was created.

10.6 Hosting and your rights

Hosting: our servers (website, licence portal, sales, updates) are hosted in France, in Paris, by Hostinger International Limited (Cyprus), our processor; our e‑mail by LWS (France).

Your rights: access, rectification, erasure, restriction, objection and portability (for data provided under the contract), by writing to contact@electronisafe.fr (subject "Données personnelles") or by post to our registered office. We reply within one month. You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

11. Updates

Update of 14/10/2026 (evening): new section 10.5 “Plugin GDPR file”. Version of 14 October 2026 (update of 14/10/2026): new section 10 “IA‑N Analyse plugin: licence, trial, purchase and updates” (licence data, trial, online purchase with Stripe and PayPal, update checks); sections 3 and 4 completed (Stripe, PayPal). Previous versions: 5 October 2026 (section 8 (IA‑N box) clarified: images that pass through our servers, services that keep images, customer documents being updated), 30 September 2026 (assistance in drafting replies, “Business prospecting” section), 26 September 2026 (website forms updated, receiving team and mail host specified) and 11 September 2026. Any substantial change will be published on this page. English translation published on 7 October 2026 and updated on 14 October 2026.