Privacy policy

The controller of your personal data is:

• PRIMAVERA SAS
• 45 rue du Mont Cenis, 75018 Paris, France
• SIREN: 930 042 767
• Email: contact@primaverapp.com

Account data

• Email address
• First and last name
• Company name (optional)
• Password (stored securely as a hash)

Payment data

• Billing information (name, address)
• Card details are processed directly by our payment provider, Stripe, and are never stored on our servers

Usage data

• Search history
• Leads viewed and exported
• Credit usage
• Account preferences

Technical data

• IP address
• Browser type and operating system
• Pages visited and time spent on them
• Login logs

Conversations and customer profile

• The messages you exchange with the assistant and the actions it carries out for you
• The customer profile that you fill in or that the assistant keeps up to date (your business, target, areas and preferences), which you can edit or clear at any time
• The types of business you ask the assistant for (only the wording of the business type, never the whole message), kept for thirty days to improve our search vocabulary

Help and requests to our team

• The questions you ask Help and its answers, kept with your conversations
• The requests you send from "Talk to a person": your message, the email address where we should reply and, so that we can answer without making you repeat yourself, your account type, your credit balance, the page or list concerned, your latest exchanges with Help, the technical identifiers of your account or session, and the delivery status of the request. They are kept for twelve months and then deleted, even if the account or visitor session is deleted earlier

Visitors without an account

• A visitor ID stored in a cookie, which lets you get your searches back if you create an account
• The search you type on the home page or the preview page, kept for 30 days and then deleted
• The questions you ask Help, deleted with your visitor session 30 days after it was opened if you don't create an account, and the email address you give if you write to our team, used only to reply to you
• A one-way hash of your IP address, produced by an irreversible calculation: it is used only to limit the number of free searches and cannot be used to recover the original address

Primavera's catalog is a database of businesses that we build in advance, before any customer order, so that our customers can find businesses to prospect. It contains business information: a business's name, address, phone number, website, email addresses, social media profiles, category and Google rating. It does not contain information about private individuals acting outside a business. Most of this information describes businesses, but some of it can relate to an identifiable person, for example the name of a sole proprietor, an email address that contains a person's name, or the name of an owner or executive.

We collect this information from public sources, mainly:

• Google Maps listings
• The websites of the businesses themselves, where we read the email addresses, phone numbers and social media profiles they publish
• In France, public business registries
• In the United States, open place data: Overture Maps (published by Meta, Microsoft, Amazon and TomTom) and All The Places (the store locators of retail chains)
• For owners and executives in the United States, a web search (see below)

Decision makers

Decision makers is an optional feature that our customers run on a list they have created. In France, the names and roles of a company's officers come from the national business register. In the United States, we run a web search for the owner or executives of each business (for example its owner, CEO or founder), and we deliver the person's first and last name, their role as published, and the address of the web page where we found them.

Email verification

When a customer asks for it, the email addresses in a list are checked by our email verification provider (see section 07), which tells us whether each address can receive email.

Who receives this information

Our customers receive it to find and contact businesses (business-to-business prospecting), when they create a list or use our API. They are responsible for how they use it, as set out in our terms of service.

If your business, your name or your email address appears in our catalog and you want it removed, email us at contact@primaverapp.com and tell us what to remove (for example the business name and address, the email address, or the person's name). You don't need an account. We may ask you to show that the information concerns you, for example by replying from the email address in question.

We will remove it within one month. We then keep the email address, name or listing that you asked us to remove on a suppression list, which we use only to keep it from being added back to our catalog.

Your data may be shared with:

• The Primavera team: to manage your account and provide support
• Our technical service providers: see the next section
• The competent authorities: when the law requires it

We never sell our customers' personal data. The business information in our catalog is a different matter: making it available to our customers is what our service does (see Business information in our catalog).

We use the following service providers:

Your data is therefore processed in the European Union and in the United States.

SCCs = the European Commission's standard contractual clauses, which ensure an adequate level of data protection.

Under the GDPR, you have the following rights:

• Right of access (Art. 15): get confirmation that your data is being processed and receive a copy of it
• Right to rectification (Art. 16): have inaccurate or incomplete data corrected
• Right to erasure (Art. 17): ask for your data to be deleted, under certain conditions
• Right to restriction (Art. 18): ask for the processing of your data to be restricted
• Right to data portability (Art. 20): receive your data in a structured, commonly used format
• Right to object (Art. 21): object to the processing of your data on legitimate grounds
• Right to withdraw your consent: at any time, for processing based on consent

To exercise these rights, contact us at contact@primaverapp.com.

We will respond to your request within one month.

If you believe that the processing of your data does not comply with the regulations, you have the right to file a complaint with the competent supervisory authority:

• CNIL (Commission nationale de l'informatique et des libertés, the French data protection authority)
• 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
• Website: www.cnil.fr

If you live in California or in another US state that has a consumer privacy law, such as Colorado, Connecticut, Oregon, Texas or Virginia, you have the following rights, whether you are a customer, a visitor to our website, or a person whose information appears in our catalog:

• Right to know: what personal information we have collected about you, where it comes from, why we use it and to whom we disclose it
• Right of access: receive a copy of your personal information, in a portable format
• Right to delete: have your personal information deleted, subject to the exceptions provided by law
• Right to correct: have inaccurate personal information corrected
• Right to opt out: of the sale or sharing of your personal information, and of its use for targeted advertising
• Right to non-discrimination: we will not treat you differently because you exercised any of these rights

How to make a request

Email us at contact@primaverapp.com. Before acting on your request, we verify your identity: if you have an account, with the information associated with it; otherwise, for example, by asking you to reply from the email address concerned. You can also have an authorized agent make the request on your behalf; we may then ask for proof of the agent's authorization and verify your identity directly with you.

We respond within one month, the same deadline as for requests under the GDPR.

Sale and sharing

We never sell our customers' personal information. Our catalog is a different matter: we make it available to our customers, and some state laws may treat this as a "sale" of the personal information it contains. Whatever the term, if your information is in our catalog, you can opt out at any time by asking us to remove it (see Removing your information from our catalog).

On our website, analytics cookies (PostHog) and advertising cookies (Meta) load when you arrive and stop as soon as you decline them. You can change your choice at any time with the "Your privacy choices" button on our cookie policy page.

We use appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (TLS/HTTPS)
• Secure password hashing
• Access to data restricted on a least-privilege basis
• Security monitoring and alerts
• Regular backups

Primavera is intended for professionals and is not designed for people under 18. We do not knowingly collect personal data from minors.

For more information about how we use cookies, see our cookie policy.

We may update this privacy policy from time to time. If we make a material change, we will let you know by email or through a notification in the Service. We encourage you to review this page regularly.

For any question about this privacy policy, or to exercise your rights, contact us at contact@primaverapp.com.