Privacy policy

1. Data controller

The controller of the processing described in this policy is the company SMRJ (Docform), a SAS with a share capital of 12 100 €, whose registered office is located at 15 boulevard Aristide Briand, 91600 Savigny-sur-Orge, France, registered with the RCS d'Évry under number 921 041 653 (see our legal notice).

2. Data we collect

Depending on your use of the site and of the service, we process:

• Contact and prospecting data: identity, business email address, company and message, when you fill in our contact form or request a demonstration.
• Account data: identity, business email address, role and preferences, when a user account is created on the platform.
• Usage data: technical logs and activity records (logins, significant actions) necessary for the security and the auditability of the service.
• Browsing data: cookies and trackers, under the conditions described in section 9.

3. Purposes and legal bases

This data is processed in order to:

• Provide the service and manage accounts : performance of the contract;
• Respond to your contact or demonstration requests : pre-contractual measures and legitimate interest;
• Ensure security, traceability and the prevention of abuse : legitimate interest and legal obligations;
• Improve the site and measure its audience : consent, where non-essential trackers are used;
• Comply with our legal and accounting obligations : legal obligation.

4. Data processed on behalf of our customers

The documents, contracts and data that our customers import or create in Docform may contain personal data (for example the identity of a signatory). For such processing, the customer remains the data controller and Docform acts as a processor within the meaning of article 28 of the GDPR: we process this data only on the customer's instructions, for the purposes of the service, and under the data processing agreement entered into with them. Docform does not use the content of its customers' documents for commercial purposes.

5. Recipients and hosting

The data is accessible only to the authorized Docform teams and to our technical service providers, within the limits of their assignments. The service is hosted in France (European Union) by Microsoft France (Microsoft Azure). We neither sell nor rent your personal data. Should a service provider carry out a transfer of data outside the European Union, it would be governed by the safeguards provided for in chapter V of the GDPR (adequacy decision or standard contractual clauses).

6. Retention periods

• Prospects: 3 years after your last contact.
• Customer accounts: for the duration of the contractual relationship, then deletion or archiving in accordance with the applicable legal obligations.
• Technical logs: a limited period, proportionate to security and audit needs.
• Cookies: periods specified in the cookie management module, within a limit of 13 months.

7. Security

We implement appropriate technical and organizational measures: encryption of data in transit and at rest, access control by role and scope, logging of actions, backups and segregation of environments. The details of our security commitments are presented in our Trust Center.

8. Your rights

In accordance with the GDPR, you have a right of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to set directions regarding what happens to it after your death. You may exercise these rights at the address contact@docform.ai. You also have the right to lodge a complaint with the CNIL (www.cnil.fr). Where the processing is carried out by one of our customers (section 4), we forward your request to the controller concerned.

9. Cookies

Cookies strictly necessary for the site to work are placed without prior consent. Other cookies are placed only with your agreement, collected through the cookie management banner. You may change your choices at any time through the "Cookies" link in the footer.

10. Changes to this policy

We may change this policy, in particular to reflect legal or functional developments of the service. The version in force, dated, is published on this page.

11. Contact

For any question regarding data protection: contact@docform.ai.