Fixeets
Book a Demo

Privacy Policy

Effective date: January 1, 2026 | Last updated: January 1, 2026

Privacy Policy

Effective Date: January 1, 2026 Last Updated: October 18, 2026

This privacy policy describes how FIXEETS SAS ("Fixeets", "we", "our", "us") collects, uses, stores, shares, and protects personal data in connection with its services. It applies to the fixeets.com website, Google Marketplace extensions, and mobile applications published on the Google Play Store and App Store.

By using our services, you acknowledge that you have read this policy. Where required by law, in particular for certain cookies or processing activities, we obtain your prior consent.

1. Data Controller

The data controller for personal data is:

FIXEETS SAS 24 allée des Châtaigners 49240 Avrillé France Contact email: [email protected]

For processing carried out on behalf of our clients, where Fixeets acts solely as a technical service provider, we act as a data processor under the GDPR. The French data protection authority (CNIL) notes that processing carried out by a data processor must be governed by contract and carried out only on the instructions of the data controller.

2. Scope

This policy applies to:

  • the fixeets.com website.
  • Google extensions such as Inventory management Fixeets, Inventory management with Sheets, Maintenance Management Fixeets, and Maintenance Management with Sheets.
  • applications available on mobile platforms, where applicable.
  • commercial communications and emails sent by Fixeets.
  • interactions with our service providers, subcontractors, and third-party tools.
  • the Claude connector of Fixeets Inventory, Maintenance, Orders and Rental, described in section 9.

It does not apply to third-party websites or services accessible via external links, which have their own privacy policies.

3. Data We Collect

We collect only the data necessary for the operation of our services. Depending on the service used, we may collect:

  • email address.
  • account or user identifier.
  • Google token.
  • crash or error logs.
  • technical browsing or usage data and on-page interaction events (such as button clicks) collected via Google Analytics, delivered through Google Tag Manager.
  • the same technical browsing data and on-page interaction events collected by the audience measurement software we host ourselves, which sets no cookie and stores no identifier on your device.
  • in our apps, usage events (screens opened, buttons clicked, errors) linked to your account during the first 7 days after it is created, and a random identifier stored on your device, as described in section 7. Never the content of your files.
  • billing data required for payment processing, via Stripe.
  • information voluntarily provided in contact, support, or subscription forms.

We do not store the content of your spreadsheets or the business data they contain, unless strictly necessary for the operation of the service and expressly stated. We do not retain more personal data than necessary to perform the service.

4. Data Not Stored

We do not store:

  • the content of users' Google Sheets files.
  • sensitive information not required for the service.
  • complete banking data.
  • personal data of third parties contained in users' files, except for incidental processing required by the requested feature.

Content remains in the user's environment or in the relevant third-party services, in particular Google Drive, in accordance with how those services operate.

5. Purposes of Processing

Data is used to:

  • provide, operate, and maintain our services.
  • authenticate users.
  • enable the operation of extensions and applications.
  • manage customer support.
  • process payments and subscriptions.
  • send transactional and commercial communications.
  • improve the stability, security, and performance of the service.
  • detect errors, fraud, abuse, or technical incidents.
  • analyse usage of the website and products.

Crash logs are used solely to diagnose and correct technical problems. Google Analytics is used to measure audience and improve the service.

6. Legal Basis for Processing

Depending on the context, our processing is based on:

  • performance of a contract or pre-contractual measures.
  • consent, where required.
  • our legitimate interest, in particular for security, fraud prevention, audience measurement, or service improvement.
  • compliance with a legal obligation.

Where consent is required, it may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Cookies and Audience Measurement

We use cookies and similar technologies to measure website audience and improve the user experience. We use Google Tag Manager to deploy tracking scripts on the site, and Google Analytics (GA4) to measure how visitors use it, including page views and interactions with certain on-page elements, such as requesting a demo, viewing pricing, submitting a contact form, or clicking through to an app store or Google Workspace Marketplace listing. These interaction events do not include your name, email address, or other directly identifying information.

We also use Google Ads conversion measurement to understand which advertising campaigns lead to a contact request, a demo booking, or an app install. Advertising cookies are disabled by default in every country, and are set only once you accept through our consent banner. If you decline, or give no answer, no advertising cookie is set.

Some cookies may be necessary for the operation of the site, while others are subject to your consent under applicable regulations. For visitors in the European Economic Area, the United Kingdom, and Switzerland, analytics cookies are disabled by default until you actively consent through our consent banner. Outside these regions, analytics cookies are active by default, consistent with applicable local requirements.

You can manage your preferences through our consent banner or your browser settings. The use of Google Analytics may raise issues relating to data transfers outside the EU, which requires proper management of the tool and consent where required.

We also use Umami, open-source audience measurement software that we host ourselves on a server located in Belgium, in the European Union. We use it to count page views and the same on-page interactions listed above, so that we can tell which pages and which channels bring visitors to our site. The measurement data is not shared with the software's publisher or with any other analytics provider.

This measurement sets no cookie and stores nothing on your device, does not follow you across other websites, and does not build a profile of you. We record the page address, the website or campaign you arrived from, your country, and the general type of browser and device. Your IP address is used only momentarily to determine the country and to generate an anonymous identifier that changes daily, and it is not stored. Because nothing is stored on or read from your device and no directly identifying data is retained, this measurement runs on the basis of our legitimate interest in understanding how our site is used, and is therefore not governed by the consent banner, which covers the Google tools described above.

Usage measurement in our apps. In our apps (Inventory, Maintenance, Orders and Rental, on the web, in Google Sheets and on mobile), we measure how new users get started with the product, so we can see where they run into difficulties and improve it. We record usage events: screens opened and time spent, the technical name of the buttons clicked, fields filled in or left empty (with their length, never their content), errors, number of sign-ins and, where applicable, the campaign or website you came from. These events are linked to your account only during the first 7 days after it is created; after that, the app stops sending them. Before you sign in, they are attached to a temporary identifier valid for 24 hours.

To avoid counting the same visitor twice, the app also stores on your device (in the browser's local storage, not in a cookie) a random identifier that expires after 90 days and is never extended, along with a sign-in counter. Each app has its own identifier: we never link them from one app to another, or with any other website.

We never record what you type, your passwords, or the content of your Google Sheets or Drive files (names, email addresses, quantities, prices or any other data they contain). This data is used only for our internal statistics, is neither sold nor shared with third parties, is stored on Google Cloud infrastructure and is automatically deleted after 90 days. This measurement is based on our legitimate interest in improving our products; you can object to it at any time by writing to [email protected].

8. Google Permissions

Certain features of our extensions require Google permissions to function correctly, including:

  • access to Google Sheets.
  • access to Google Drive.
  • secure connection to our servers.
  • management of Google Calendar, if this feature is used.
  • access to the Google token for authentication.

These permissions are used solely for the operation of Fixeets products. We do not use this access to read or exploit data that is not necessary for the feature provided.

9. Claude Connector

The Claude connector is an optional feature of Fixeets Inventory, Fixeets Maintenance, Fixeets Orders and Fixeets Rental. Once you add it to your Claude account, Claude (the artificial intelligence assistant made by Anthropic) can read and update your Fixeets files when you ask it to: record stock movements, report a breakdown or schedule maintenance, prepare an order or a rental, and so on. Nothing happens until you connect it yourself.

What is sent to Anthropic. What you ask Claude to read or change (for example item names, quantities, suppliers, or a file you attach) is sent to Anthropic, as with any conversation with Claude. This happens at your initiative, from your Claude account. Anthropic is not a subcontractor of Fixeets: it processes this data under its own terms and privacy policy, as part of your relationship with it. You choose what you share.

Access to your files. The connector acts with your own Google account and the "drive.file" permission: it can only open files created by the Fixeets app. The rest of your Google Drive stays out of reach. Your data stays in your Google Sheet; Fixeets keeps no copy of it anywhere else.

The same rights as in the app. Everyone signs in with their own Google account. Collaborator rights and your plan limits apply exactly as in the app. Before a deletion or a significant change, Claude sums up what will change and waits for your explicit confirmation.

What Fixeets keeps. To run the connector, Fixeets keeps your email address, the Google token that lets it act on your files on your behalf (the same one the app uses), and technical logs (actions called, errors, identified by a pseudonymous code rather than your email address), kept for a limited time useful for troubleshooting. The tokens given to Claude expire after one hour; the refresh token is valid for 30 days and is only extended if you keep using the connector, never beyond 90 days after you connected: after that, you reconnect the connector from Claude. The usage measurement described in section 7 also applies to the connector (Claude connection, name of the action used, successful or not), never to the content of your requests or files.

No training by Fixeets. Fixeets does not use the data passing through the connector to train any artificial intelligence model. How Anthropic uses your conversations depends on your Claude account settings.

Disconnect at any time. Remove the connector in Claude's settings, and revoke Fixeets' access on your Google account permissions page: https://myaccount.google.com/permissions.

Data about your own contacts. If your files contain personal data about third parties (customers, suppliers, employees), you remain responsible for processing it, including when you ask Claude to read it; Fixeets acts as a technical processor, as stated in section 1.

10. Service Providers and Subcontractors

We may use third-party service providers to operate our services. These providers act as data processors or independent controllers depending on the case.

Main providers:

  • Stripe for payment processing.
  • Google for authentication, associated services, Google Analytics, and Google Tag Manager.
  • Brevo for email sending and commercial communications.
  • Google Cloud for the infrastructure hosting our self-hosted audience measurement server. Google provides the machine only: the software is operated by us and the measurement data is not made available to any analytics provider.

These providers are required to comply with appropriate contractual obligations regarding security, confidentiality, and data protection. The CNIL specifies that the data controller must choose subcontractors offering sufficient guarantees and formalise the relationship by contract. Stripe also indicates compliance commitments for personal data received from the EEA.

Regarding Google data (obtained through your Google account, in particular during authentication or access to Google Sheets, Drive, or Calendar): it is never sold, and never shared with data brokers, advertising networks, or third parties for their own use. It is processed only by the subprocessors strictly necessary to operate the service, namely Google Cloud / Firebase (hosting and the Firestore database) and our payment provider, solely for billing data, which contains no Google user data. The only exception: when you use the Claude connector, the data you ask Claude to read is sent to Anthropic, at your initiative (see section 9).

11. Payments

Payments are processed by specialist providers such as Stripe. We do not store our customers' complete banking data.

Information required for payment processing may be transmitted to Stripe in order to execute the transaction, prevent fraud, and manage subscriptions. Stripe has its own compliance and data protection obligations.

12. Commercial Communications

We may send promotional emails, product updates, and commercial information. You can unsubscribe at any time via the unsubscribe link in our emails or by contacting us at [email protected].

We only send marketing communications under the conditions permitted by applicable law.

13. Transfers Outside the EU

Our services may involve transfers of data to countries outside the European Union, including the United States, depending on the tools used. In such cases, we put in place the appropriate safeguards provided for under the GDPR, such as standard contractual clauses or other recognised mechanisms. Anthropic, the maker of Claude, is based in the United States: the data you send it through the Claude connector is processed under its own safeguards.

The data collected by the audience measurement software we host ourselves is stored in the European Union and is not transferred outside it. Where transfers are made via US-based providers, they are governed in accordance with applicable requirements. The CNIL notes that attention must be paid to transfer conditions and the compliance of audience measurement tools when they involve data flows outside the EU.

14. Retention Period

We retain data only for as long as necessary for the purposes pursued, unless a longer legal retention obligation applies.

As a general guide:

  • account data is retained for as long as the account is active.
  • billing data is retained in accordance with legal obligations.
  • technical logs are retained for a limited period useful for diagnosis.
  • marketing data is retained until consent is withdrawn or the user objects.
  • usage measurement data from our apps is automatically deleted after 90 days, and the identifier stored on your device expires after 90 days.
  • Claude connector tokens expire after one hour; the refresh token is valid for 30 days, extended only if the connector is used, and never more than 90 days after connecting.

15. Data Security

We implement appropriate technical and organisational measures to protect data against loss, unauthorised access, alteration, or disclosure. This includes the use of encryption where relevant, restricted access, and contractual security measures with our service providers.

The CNIL recommends providing for adapted security measures, confidentiality obligations, conditions for return/destruction, and incident notification mechanisms with subcontractors.

16. Your Rights

Under the GDPR, you have the following rights in particular:

  • right of access.
  • right to rectification.
  • right to erasure.
  • right to restriction of processing.
  • right to object.
  • right to data portability.
  • right to withdraw consent, where processing is based on consent.

To exercise your rights, you may write to [email protected]. We may ask for reasonable proof of your identity before responding to your request.

17. Complaints

If you believe your rights are not being respected, you may lodge a complaint with the supervisory authority competent in your country of residence or with the CNIL in France.

18. Minors' Data

Our services are not intended for minors. We do not knowingly collect personal data from persons under 18 years of age.

19. External Links

Our website or applications may contain links to third-party services. We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing them with any data.

20. Changes

We may update this policy at any time to reflect changes in our practices, services, or legal requirements. The version published on this page is the one currently in force.

21. Contact

For any questions relating to this policy or your personal data:

FIXEETS SAS 24 allée des Châtaigners 49240 Avrillé France

[email protected]