Privacy Policy
Effective Date: May 26, 2026 Last Updated: May 26, 2026
This privacy policy describes how FIXEETS SAS ("Fixeets", "we", "our", "us") collects, uses, stores, shares, and protects personal data in connection with its services. It applies to the fixeets.com website, Google Marketplace extensions, and mobile applications published on the Google Play Store and App Store.
By using our services, you acknowledge that you have read this policy. Where required by law, in particular for certain cookies or processing activities, we obtain your prior consent.
1. Data Controller
The data controller for personal data is:
FIXEETS SAS 24 allée des Châtaigners 49240 Avrillé France Contact email: [email protected]
For processing carried out on behalf of our clients, where Fixeets acts solely as a technical service provider, we act as a data processor under the GDPR. The French data protection authority (CNIL) notes that processing carried out by a data processor must be governed by contract and carried out only on the instructions of the data controller.
2. Scope
This policy applies to:
- the fixeets.com website.
- Google extensions such as Inventory management Fixeets, Inventory management with Sheets, Maintenance Management Fixeets, and Maintenance Management with Sheets.
- applications available on mobile platforms, where applicable.
- commercial communications and emails sent by Fixeets.
- interactions with our service providers, subcontractors, and third-party tools.
It does not apply to third-party websites or services accessible via external links, which have their own privacy policies.
3. Data We Collect
We collect only the data necessary for the operation of our services. Depending on the service used, we may collect:
- email address.
- account or user identifier.
- Google token.
- crash or error logs.
- technical browsing or usage data collected via Google Analytics.
- billing data required for payment processing, via Stripe.
- information voluntarily provided in contact, support, or subscription forms.
We do not store the content of your spreadsheets or the business data they contain, unless strictly necessary for the operation of the service and expressly stated. We do not retain more personal data than necessary to perform the service.
4. Data Not Stored
We do not store:
- the content of users' Google Sheets files.
- sensitive information not required for the service.
- complete banking data.
- personal data of third parties contained in users' files, except for incidental processing required by the requested feature.
Content remains in the user's environment or in the relevant third-party services, in particular Google Drive, in accordance with how those services operate.
5. Purposes of Processing
Data is used to:
- provide, operate, and maintain our services.
- authenticate users.
- enable the operation of extensions and applications.
- manage customer support.
- process payments and subscriptions.
- send transactional and commercial communications.
- improve the stability, security, and performance of the service.
- detect errors, fraud, abuse, or technical incidents.
- analyse usage of the website and products.
Crash logs are used solely to diagnose and correct technical problems. Google Analytics is used to measure audience and improve the service.
6. Legal Basis for Processing
Depending on the context, our processing is based on:
- performance of a contract or pre-contractual measures.
- consent, where required.
- our legitimate interest, in particular for security, fraud prevention, audience measurement, or service improvement.
- compliance with a legal obligation.
Where consent is required, it may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.
7. Cookies and Audience Measurement
We use cookies and similar technologies, including via Google Analytics, to measure website audience and improve the user experience. Some cookies may be necessary for the operation of the site, while others are subject to your consent under applicable regulations.
You can manage your preferences through your browser settings and, where applicable, through our consent banner. The use of Google Analytics may raise issues relating to data transfers outside the EU, which requires proper management of the tool and consent where required.
8. Google Permissions
Certain features of our extensions require Google permissions to function correctly, including:
- access to Google Sheets.
- access to Google Drive.
- secure connection to our servers.
- management of Google Calendar, if this feature is used.
- access to the Google token for authentication.
These permissions are used solely for the operation of Fixeets products. We do not use this access to read or exploit data that is not necessary for the feature provided.
9. Service Providers and Subcontractors
We may use third-party service providers to operate our services. These providers act as data processors or independent controllers depending on the case.
Main providers:
- Stripe for payment processing.
- Google for authentication, associated services, and Google Analytics.
- Brevo for email sending and commercial communications.
These providers are required to comply with appropriate contractual obligations regarding security, confidentiality, and data protection. The CNIL specifies that the data controller must choose subcontractors offering sufficient guarantees and formalise the relationship by contract. Stripe also indicates compliance commitments for personal data received from the EEA.
10. Payments
Payments are processed by specialist providers such as Stripe. We do not store our customers' complete banking data.
Information required for payment processing may be transmitted to Stripe in order to execute the transaction, prevent fraud, and manage subscriptions. Stripe has its own compliance and data protection obligations.
11. Commercial Communications
We may send promotional emails, product updates, and commercial information. You can unsubscribe at any time via the unsubscribe link in our emails or by contacting us at [email protected].
We only send marketing communications under the conditions permitted by applicable law.
12. Transfers Outside the EU
Our services may involve transfers of data to countries outside the European Union, including the United States, depending on the tools used. In such cases, we put in place the appropriate safeguards provided for under the GDPR, such as standard contractual clauses or other recognised mechanisms.
Where transfers are made via US-based providers, they are governed in accordance with applicable requirements. The CNIL notes that attention must be paid to transfer conditions and the compliance of audience measurement tools when they involve data flows outside the EU.
13. Retention Period
We retain data only for as long as necessary for the purposes pursued, unless a longer legal retention obligation applies.
As a general guide:
- account data is retained for as long as the account is active.
- billing data is retained in accordance with legal obligations.
- technical logs are retained for a limited period useful for diagnosis.
- marketing data is retained until consent is withdrawn or the user objects.
14. Data Security
We implement appropriate technical and organisational measures to protect data against loss, unauthorised access, alteration, or disclosure. This includes the use of encryption where relevant, restricted access, and contractual security measures with our service providers.
The CNIL recommends providing for adapted security measures, confidentiality obligations, conditions for return/destruction, and incident notification mechanisms with subcontractors.
15. Your Rights
Under the GDPR, you have the following rights in particular:
- right of access.
- right to rectification.
- right to erasure.
- right to restriction of processing.
- right to object.
- right to data portability.
- right to withdraw consent, where processing is based on consent.
To exercise your rights, you may write to [email protected]. We may ask for reasonable proof of your identity before responding to your request.
16. Complaints
If you believe your rights are not being respected, you may lodge a complaint with the supervisory authority competent in your country of residence or with the CNIL in France.
17. Minors' Data
Our services are not intended for minors. We do not knowingly collect personal data from persons under 18 years of age.
18. External Links
Our website or applications may contain links to third-party services. We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing them with any data.
19. Changes
We may update this policy at any time to reflect changes in our practices, services, or legal requirements. The version published on this page is the one currently in force.
20. Contact
For any questions relating to this policy or your personal data:
FIXEETS SAS 24 allée des Châtaigners 49240 Avrillé France