Privacy Policy

1.1 Azuro Software ('Azuro', 'we', 'us', or 'our'), established under French law, is committed to protecting your privacy and personal data in full compliance with Regulation (EU) 2016/679 (GDPR), the French Data Protection Act (Loi n° 78-17 of January 6, 1978, as amended), the ePrivacy Directive, and all applicable laws. 1.2 This Privacy Policy ('Policy') explains how your personal data is collected, processed, stored, used, disclosed, and protected in connection with our websites, software, platforms, and services (collectively 'Services'). 1.3 By using our Services, you agree to this Policy. If you do not agree, please do not use our Services. 1.4 This Policy applies to all users worldwide who access or use Azuro’s Services.

2.1 Azuro Software is the controller of your personal data processing activities. 2.2 Our contact information is as follows: email: [email protected]. 2.3 The Data Protection Officer (DPO) can be reached at [email protected] and handles questions regarding your data rights.

3.1 We collect personal data you provide directly such as your identity, contact details, job and company information, user credentials, payment information, and correspondence. 3.2 Certain data is collected automatically when you use our Services, including technical data such as IP addresses, browser types, device identifiers, and usage patterns. 3.3 We do not knowingly process special categories of sensitive data without explicit consent, except where legally required or otherwise permitted. 3.4 We may receive information about you from third parties such as analytics providers, payment processors, and public sources.

4.1 We process your data to provide, administer, and improve our Services, fulfill contractual obligations, communicate with you, ensure security, comply with legal obligations, and conduct marketing with your consent. 4.2 The legal basis for processing includes contract performance, legal compliance, legitimate interest, and consent, depending on the purpose. 4.3 We carefully balance legitimate interests against your rights to protect your privacy.

5.1 Your personal data may be accessed by authorized Azuro employees on a need-to-know basis under confidentiality agreements. 5.2 We share data with third-party service providers (cloud hosting, payment processing, email services, analytics) under contractual obligations ensuring GDPR compliance. 5.3 We may disclose data to legal authorities if required by law or regulation. 5.4 We never sell or rent your personal data.

6.1 Personal data may be transferred outside the European Economic Area (EEA) only with appropriate safeguards, such as European Commission adequacy decisions, Standard Contractual Clauses, or Binding Corporate Rules. 6.2 We conduct transfer impact assessments to ensure compliance with GDPR data protection requirements.

7.1 Personal data is retained only as long as necessary to fulfill the purposes described, comply with legal retention requirements, and resolve disputes. 7.2 Typical retention periods vary by data type, such as billing data retained 10 years per tax law, and support requests retained 3 years. 7.3 When no longer needed, data is securely deleted, anonymized, or pseudonymized.

8.1 You have the right to request access, rectification, erasure, restriction of processing, data portability, objection to processing, and to withdraw consent at any time. 8.2 You also have the right to complain to the CNIL (French data protection authority) if you believe your data rights have been violated. 8.3 Requests can be sent to [email protected]. We respond within one month of receipt.

9.1 Azuro employs industry-standard technical and organizational measures to protect your personal data, including encryption, access controls, intrusion detection, and regular security assessments. 9.2 We have defined procedures to detect, respond to, and notify data breaches in compliance with GDPR timelines.

10.1 Our use of cookies and tracking technologies is detailed in our Cookie Policy, which provides mechanisms to accept or refuse non-essential cookies. 10.2 You can manage your cookie preferences via the consent banner displayed on our web properties.

11.1 Our Services are not intended for children under 16 years without parental consent. 11.2 We do not knowingly collect personal data from children without consent, and such data is deleted immediately upon discovery.

12.1 For any new or high-risk processing activities, we conduct DPIAs in compliance with GDPR Article 35.

13.1 In case of a personal data breach likely to cause risk to data subjects, we will notify the CNIL and affected individuals within requisite timeframes.

14.1 We may update this Policy periodically to reflect changes in laws or business processes. 14.2 Significant changes will be communicated to users via email and on our website at least 30 days prior to implementation.

15.1 This Policy is governed by French law. 15.2 Disputes shall be subject to the exclusive jurisdiction of the courts of Paris, France.