Last updated: June 12, 2026 · Version française (reference version)
1. Data controller
Contania (https://www.contania.io) is operated by [TO COMPLETE: company name, registration number, address]. Contact: reclamation@contania.io.
2. Data we collect
Account details (name, email, WhatsApp number, business type, hashed password, your accountant's email); invoices you send us (files and extracted fields: supplier, dates, amounts, category); if you connect your mailbox: invoice emails only (see section 4); if you connect your bank: a read-only list of transactions; professional trips (mileage option); technical logs.
3. Why and on what legal basis
Reading and filing your invoices, and sending summaries to your accountant: performance of contract (GDPR art. 6.1.b). Mailbox and bank connections: consent (art. 6.1.a), revocable at any time. Security logs: legitimate interest (art. 6.1.f). We never sell your data. No advertising. No commercial profiling.
4. Google user data (Gmail)
- We access your emails only to identify and retrieve invoices and purchase receipts.
- We do not read, store or archive any other content of your mailbox.
- We never sell this data, never share it with advertisers, and never use it for advertising.
- No human reads your emails, except at your explicit request (support), for security purposes, or to comply with applicable law.
- You can disconnect your mailbox at any time from your dashboard or your Google account settings — access stops immediately.
Contania's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Processors
Anthropic (AI invoice reading — your data is not used to train their models), Twilio (WhatsApp), Nylas (EU region, mailbox connection), Bridge (Bankin', France — read-only bank access), Supabase (database and file storage, EU — West EU/Ireland, eu-west-1), Resend (outbound email, sent from the EU), Railway (application hosting, EU West — Amsterdam). All bound by GDPR art. 28 data processing agreements; transfers outside the EU are covered by the European Commission's Standard Contractual Clauses.
6. Retention
Invoices: for the duration of your subscription, then [TO COMPLETE: retention period — French law requires accounting records to be kept for 10 years]. Account data: contract duration plus [TO COMPLETE: post-termination period]. Connected emails: only detected invoices are kept. Logs: [TO COMPLETE: period].
7. Your rights
Access, rectification, erasure, portability (CSV export available anytime in your dashboard), objection and withdrawal of consent. Contact: reclamation@contania.io — answer within 30 days. You may also lodge a complaint with the French authority (CNIL, www.cnil.fr).
8. Cookies
One strictly necessary session cookie (« contania_session ») to keep you signed in. No advertising cookies, no trackers, no third-party analytics.