Privacy policy

This policy explains how Cultivio processes personal data from visitors to cultivio.fr and users of the Cultivio application, in accordance with the EU General Data Protection Regulation (GDPR) and French data protection law.

Data controller

Cultivio — contact: hello@cultivio.fr

Data processed by the application

• Account data: email address, identifier, role and accessible organizations
• Business data: crops, observations, measurements, notes, alerts and related metadata
• Photos selected from the library or taken with the camera when the user voluntarily attaches them to an observation
• Technical data required for authentication and service security; session tokens are kept in the device's secure storage

The application does not access the microphone, contacts or location. It contains no advertising or behavioural tracking SDK.

Data collected on the website

The contact form may collect:

• Name and work email address
• Operation size (optional)
• Free-form message (optional)

No tracking cookie, analytics pixel or advertising tracker is deployed on the website.

Purposes and legal bases

• Provide the application, authenticate users and synchronize their business data
• Enable shared work within authorized organizations
• Secure, support and maintain the service
• Respond to demo and contact requests

Processing is based on delivery of the requested service, Cultivio's legitimate interest in securing and improving its service, and consent when requested through the contact form.

Recipients and hosting

Data is accessible to authorized members of the relevant organization and to the Cultivio team when required for support or security. It is hosted on European infrastructure and transmitted over HTTPS. It is not sold, used for advertising or shared for external marketing.

Retention

Application data is kept while the organization uses the service, then deleted or anonymized when no longer required, subject to legal obligations and technical backup rotation periods. Prospect data is kept for no longer than 3 years after the last contact.

Your rights and deletion requests

You have GDPR rights of access, rectification, erasure, restriction, portability and objection. Cultivio accounts are created by an organization administrator. To request deletion of your account or data, use the link in the application settings or email hello@cultivio.fr. We respond within 30 days.

You may also lodge a complaint with the CNIL: cnil.fr/en/plaintes .

Security and changes

We use access controls, secure on-device session storage and encrypted communications. This policy may change; its latest update date appears at the top of this page.