Privacy Policy

Sell It Today (hereinafter the “Company”), as the data controller, hereby issues this privacy policy to inform users (hereinafter the “Users”) of its website https://sellit.today, its web application (hereinafter the “Sites”), and/or its social media platforms regarding the processing of personal data collected through the Sites and/or said social media platforms.

The processing of personal data belonging to Users of the Websites and/or social media platforms is carried out under the responsibility of the following data controller:

Sell It Today, 494 rue Léon Blum, 34000 Montpellier. Represented by BUILDERS GROUP (RCS 939 943 585), in its capacity as President, which is itself represented by Mr. Antonin ARMAND, in his capacity as Managing Director.

The Company collects the following data:

• User identification information (such as the User’s last name, first name, email and phone contact information, identification document, mailing address, username, and photograph);
• The User's login information (such as username, password, IP address, city of connection, internet service provider, and information about the User's browser and device);
• The User's personal information (such as date of birth, place of birth, marital status, and nationality, job title, and any other information posted, particularly on the User's social media accounts);
• Financial information (such as identification numbers, bank account numbers, and credit or debit card numbers).

As well as any other information that the User has provided to the Company about himself or herself, including, in particular, content provided by the User on the Websites or social media, when participating in a satisfaction survey, or more generally during communications with the Company.

When the User provides personal data relating to third parties, the User warrants that he or she has obtained the necessary authorizations and consents from the individuals to whom such data pertains.

The Company processes the User's personal data for the following purposes:

• Responding to User inquiries and requests for information regarding the services offered on the Sites, based on the Company’s legitimate interest in answering Users’ questions;
• The management, billing, and payment of services subscribed to from the Company in connection with the performance of the contract;
• Creating or modifying an account on the Company's Websites for the purpose of performing the contract;
• The compilation of sales statistics based on the Company's legitimate business interest in improving its services;
• The creation of loyalty programs based on the performance of the contract;
• Sending newsletters and personalized offers to Users via electronic communication based on the Users' consent;
• The provision by third parties of technical, logistical, or other services on behalf of the Company in connection with the performance of the contract;
• Sharing customer and prospect files with its partners based on Users' consent;
• Collecting audience metrics, including the number of page views, the number of visits to the Sites and social media platforms, the activity of Users on the Sites and social media platforms, and the frequency of their return visits, based on Users’ consent;
• Sharing content from the Sites on social media based on the Company’s legitimate and commercial interest in conducting business development;
• The management of customer reviews and comments based on the Company’s legitimate and commercial interest in improving its services;
• To improve its services by inviting Users to participate in surveys, studies, and satisfaction surveys, based on the Company’s legitimate business interest in improving its services;
• Handling requests for the right of access, rectification, objection, portability, erasure, and withdrawal, as well as requests to establish guidelines regarding the use of one’s data after death, based on the Company’s legal obligation;
• Combating money laundering and terrorist financing in accordance with the Company's legal obligation;
• Debt collection and the exercise by the Company of any legal rights based on the Company’s legitimate interest in defending its rights.

If the User's personal data were to be processed for different purposes, the Company undertakes to notify the User and, where required by law, to obtain the User's prior consent.

Access to your Google Calendar

When you choose to connect your Google account to Sell It Today, you grant the application permission to view and manage the events on your Google Calendar through the Google Calendar API. We request only the minimum access required for this feature (the ability to read and write calendar events). We do not access your emails, contacts, files, or any other Google service.

How we use Google Calendar data

We use your Google Calendar data solely to provide the calendar and scheduling features of Sell It Today (the Agenda module): to create, update, and delete appointments, and to keep your events synchronized in both directions between Sell It Today and your Google Calendar. We never use this data for advertising, profiling, or any purpose unrelated to providing the service.

How we protect Google user data

Google Calendar data is protected with the same safeguards as all other personal data we hold:

• Encrypted in transit (TLS 1.3) and at rest (AES-256);
• Google access and refresh tokens are stored encrypted and are never exposed to third parties;
• Access is strictly controlled, logged, and protected by strong authentication;
• Operational data is hosted within the European Union.

Data sharing

We do not sell Google user data and do not share it with third parties, except where strictly necessary to operate the service or where required by law. We do not transfer Google user data for advertising or any unrelated purpose.

Data retention and deletion

We retain Google Calendar data only as long as needed to provide the synchronization feature. You can disconnect your Google account at any time from within Sell It Today, or revoke access directly from your Google Account at https://myaccount.google.com/permissions. When you disconnect, we revoke our access at Google and stop all synchronization, so we can no longer read or write your calendar. You may also request deletion of your stored data at any time by contacting us at contact@sell.it.today, and all Google data associated with your account is permanently deleted when your account is closed.

Limited Use

Sell It Today's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

The Company uses the following cookies on the Sites:

Audience measurement and marketing cookies:

The Company uses cookies provided by third-party service providers for audience measurement and marketing purposes, specifically:

• Google Analytics: The Google Analytics service tracks Users and identifies how they use the Site. The data generated by these cookies relates to the use of the Site and the city from which Users connect, based on the collection of their truncated IP addresses. This data is immediately anonymized by Google Analytics and is not shared with the Company. Under no circumstances can the Company use this data to identify an individual;
• Microsoft Clarity: The Microsoft Clarity service, provided by Microsoft Corporation, analyzes how Users interact with the Sites using heat maps and session recordings. The data collected relates to Users’ browsing behavior (clicks, scrolling, cursor movements). Sensitive content is hidden by default and is not recorded. This cookie is set only after the User has given consent to the audience measurement category;
• Google Ads: These cookies collect data about the content the User views on the Sites and other websites in order to provide the User with personalized advertising when the User visits other sites. If the User accesses the Sites via a Google ad, Google Ads places a cookie on the User’s device. These cookies allow Google to recognize the User’s web browser. The Company has no control over how Google subsequently uses the data processed as a result of its use of this tool.

The use of these services on the Sites involves the transfer of the User’s personal data outside the EU to Google’s and Microsoft’s servers in the United States. In this regard, it is noted that these companies certify that they comply with the EU-U.S. data protection framework.

For more information, Users can visit Google's privacy policy page.

The Company recommends that the User accept these cookies to enhance the browsing experience on the Sites. However, the User is free to choose whether or not to accept cookies. If the User wishes to refuse these cookies, the Company invites them to configure cookie settings on a case-by-case basis or to refuse them systematically by adjusting their web browser settings.

The personal data collected (cookie ID) is retained by the Company for a period of 13 months.

Social Media

The Company is active on various social media platforms. As such, the Company may process publicly available data from the profiles of social media users who share content, subscribe, follow, or contact the Company on these platforms.

The Company shall not be liable for the User’s public data accessible on these networks and platforms. Users are therefore advised to review the privacy policies applicable to each of these platforms in order to configure their privacy settings.

In any case, the Company does not create any database based on the personal information that the User may post on social media, and the Company does not process any data relating to the User’s privacy through this channel.

The Company discloses the collected data to technical service providers responsible for the development, maintenance, and hosting of its Websites and its IT system; to service providers responsible for marketing, sales, legal affairs, and litigation; accounting, and those responsible for managing user relations, as well as to payment service providers, solely for the purposes mentioned above and to the extent necessary for the performance of the tasks assigned to them.

These recipients may contact the User directly using the contact information the User has provided.

The Company requires these recipients to use the User's personal data solely to manage the services for which they are responsible and in accordance with applicable laws and regulations regarding the protection of personal data.

Where applicable, the User's personal data may be disclosed to third parties authorized by law (in particular in response to an express and substantiated request from judicial authorities).

Finally, the Company may also, with the User’s express consent, use Users’ personal data directly or indirectly (for example, by sharing it with its partners) for marketing purposes.

The User's personal data is stored within the European Union in the Company's databases or those of its service providers.

The Company implements organizational, technical, software, and physical measures related to digital security to protect the User's personal data from alteration, destruction, and unauthorized access. However, it should be noted that the internet is not a completely secure environment and that the Company cannot guarantee the security of the transmission or storage of the User’s data on the internet.

Data is retained in accordance with the law for a period justified by the purposes of the processing, namely:

• Data used for marketing purposes is retained for up to 3 years from the date of collection or the last contact with the User;
• Data that identifies the User is retained for up to 5 years after the end of the contractual relationship with the Company in order to process the User’s requests and complaints;
• Data relating to commercial communications between the Company and the User, particularly in the event of requests for information or complaints from the User, are retained for as long as necessary to process the User’s request. Beyond this period, such data may be retained in an archive database for an additional period, particularly for evidentiary purposes;
• Some personal data is retained for as long as necessary to comply with a legal or regulatory obligation; in particular, the Company retains invoices for a period of 10 years in order to meet its legal obligations regarding the retention of accounting documents and supporting documents.
• With regard to processing for statistical purposes and exclusively for research purposes, if the analysis requires it, the initial retention period for all such data may be extended up to 3 years.

In accordance with the provisions of Regulation No. 2016/679 of April 27, 2016, and Law No. 78-17 of January 6, 1978, as amended, the User has the right to access their data, the right to have inaccurate or incomplete information corrected, the right to have data erased that is no longer necessary for processing, the right to withdraw their consent to processing, the right to object to the processing of their data when there are no legitimate and compelling grounds justifying the processing, the right to object to commercial solicitation, the right to restrict processing, the right to data portability, the right not to be subject to a decision based solely on automated processing, and the right to provide instructions regarding the handling of their data after their death.

The User may exercise his or her rights at any time by contacting the Company:

• By mail to the following address: Sell It Today, 494 rue Léon Blum, 34000 Montpellier;
• By email to the following address: contact@sell.it.today;

In their request, the User must provide their first and last names, as well as the email address or mailing address to which they wish to receive the Company’s response. To prevent fraudulent requests, the User must provide proof of identity. After the request has been processed, this proof of identity will be destroyed. In accordance with the law, a response to this request will be provided within one month of its receipt.

Finally, the User has the right to file a complaint with the CNIL or any other competent supervisory authority in their country of residence.