Privacy policy

Date : January 27th 2024

1. Introduction

Kaizup guarantees the security of your personal data and your privacy. Kaizup aims to be transparent towards its users and provide optimal security for their data. All information relating to the data processed by Kaizup will be listed below. This information therefore includes the nature of the data collected, its retention period, a detailed explanation of its uses, etc. Your rights to this data will also be listed.

The privacy policy is a constantly evolving section due to the continuous addition of features within our software. We invite you to consult the update of the privacy policy from time to time. In any case, you will be notified of the modification of this section by our usual communication channels.

Any questions about your data? For any questions or requests, please contact our DPO (Data Protection Officer) mentioning DPO in the subject at the address info@kaizup.

2. Data Retention and Storage

2.1 Data Retention Period

Kaizup retains your personal data only for 5 years if you are subscribed to our marketing email list, to fulfill the purposes outlined in this policy. After this period, your data will be securely deleted.

If you choose to delete your account, your personal data will be deleted immediately, regardless of the retention period. We are committed to ensuring your data is not stored longer than required by our business needs or legal obligations.

3. User Rights and Control

3.1 User Rights

As a user, you have the right to access, update, or request the deletion of your personal data. This means you can verify what information we hold about you, correct inaccuracies, or erase data that is no longer necessary. To exercise these rights, please contact us at info@kaizup with subject « DPO request » .

3.2 Opt-Out Mechanisms

Kaizup provides mechanisms to opt out of non-essential data collection, such as receiving newsletters or being tracked for analytics purposes. You can do so through the provided tools or by contacting us directly.

4. Data Sharing and Third-Party Partners

4.1 Third-Party Sharing

Kaizup may share your data with trusted third-party partners who assist us in providing our services. These partners are bound by strict confidentiality agreements and are only authorized to use your data in line with our instructions and applicable data protection laws.

In the event of a data breach by any of our third-party partners, we will notify you immediately.

4.2 International Data Transfers

Your data may be transferred and processed in countries outside of your own. In such cases, we ensure that appropriate safeguards, such as standard contractual clauses or equivalent measures, are in place to protect your personal information.

However, despite these international transfers, the application follows the GDPR (General Data Protection Regulation) guidelines. All data is hosted on European servers and is managed in full compliance with GDPR rules to ensure the highest standards of data protection.

5. Security Measures

5.1 Protection of Data

We implement robust, industry-standard security measures to protect your data from unauthorized access, disclosure, or misuse. These measures include encryption, regular system audits, and strict access controls to ensure the safety of your personal information.

6. Cookies and Tracking Technologies

6.1 Use of Cookies

Kaizup uses cookies and similar tracking technologies to enhance your user experience, analyze platform usage, and deliver personalized content. You have the option to manage or disable cookies through your browser settings if desired.

7. Legal Bases for Data Processing

Kaizup processes your data based on one or more legal bases, including your consent, the necessity to fulfill contractual obligations, compliance with legal requirements, or legitimate interests aimed at improving our services and user experience.

8. Breach Notification

8.1 Data Breach Procedures

In the event of a data breach, Kaizup will immediately notify affected users and the appropriate authorities as required by applicable laws. Our goal is to ensure transparency and take immediate action to minimize any potential harm.

9. Data Collection and Usage

9.1 Data Collection Process

As a priority, let us emphasize that the collection of this data will always be done with your consent. Indeed, in order for our services to be optimal, we must benefit from some of your data and your consent for each of these data.

Kaizup being in constant evolution, we will keep you informed of changes to our privacy policy. When the software is released, we invite you to re-read this document.

10. Join List Policy

By joining our list, you agree to receive emails from us regarding direct marketing, software updates, and product news. The purpose of joining our list is to keep you informed of the progress of our application and any special opportunities. We collect the following data:

  • Email

You must give your consent by checking the box before subscribing to join our list. Your data will be retained for a period of 5 years.

11. Beta Testing Policy

By participating in our beta testing program, you help us evaluate and enhance our software. This testing phase allows us to identify issues, improve the user experience, and develop new features.

11.1 Data Collected During Beta Testing

To participate in beta testing, you may be asked to provide the following information:

  • First name and last name (for identification purposes)
  • Email address (for communication and feedback purposes)
  • Website URL (for better understanding of your online presence)
  • Social media authorizations (to facilitate communication and gather feedback through social media channels)
  • Usage data (to monitor software performance and identify issues)
  • Feedback provided through surveys, reports, or direct communication
11.2 Use of Collected Data

The data collected during beta testing will be used solely for:

  • Enhancing the functionality and performance of the software
  • Identifying and resolving bugs or issues
  • Gaining insights to improve the user experience
  • Engaging with participants through social media for feedback and updates
11.3 Data Retention

Beta testing data will be retained for the duration of the beta testing program and for up to 5 years after its conclusion for analysis and further improvements.

11.4 Consent and Opt-Out

Participation in beta testing is voluntary. By enrolling, you consent to the collection and use of your data as outlined in this policy. You may opt-out of the beta testing program at any time by contacting info@kaizup with subject « Beat testing opt-out ».

12. Application Data Privacy

At Kaizup, we are committed to safeguarding your privacy and ensuring a secure and transparent experience when you use our web application ("Kaizup"). This section of our Privacy Policy explains how we handle your personal information and user data within the app.

12.1 Data Collection and Usage
  • User Account Information: If you create an account within the app, we may collect your username, email address, and other registration details as necessary.
  • Usage Data: We may collect information about how you interact with the app, including the features you use, the content you access, and your interactions with other users if applicable.
12.2 Data Security

We employ robust security measures to protect your data from unauthorized access, disclosure, alteration, or destruction. We use industry-standard encryption protocols and regularly update our security practices to ensure the safety of your personal information.

12.3 Third-Party Services

The App may contain links to third-party websites or services. Please note that these third-party services have their own privacy policies, and we are not responsible for their practices. We encourage you to review their policies before interacting with them.

12.4 User Control
  • Account Deletion: You can delete your account and associated data within the App at any time.
  • Data Access and Modification: You can access and update your personal information through the app's settings.

By using the App, you consent to the collection and use of your data as described in this Privacy Policy. We may update this policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes through the App or other communication channels.

13. Social Media Authorization

At Kaizup, we take your privacy and data security seriously. This section of our Privacy Policy outlines how and why we may request authorization to access your private information from social media platforms such as Facebook, Instagram, and LinkedIn when you use our services.

13.1 Purpose of Access
  • Account Registration and Social Media Authorization: To facilitate the registration process and access user data for the purpose of gathering metrics and enabling content publishing on their behalf when you choose to log in or create an account using your social media credentials.
  • Enhanced User Experience: To improve your experience on our platform by providing personalized content and recommendations based on your social media activity.
  • Social Sharing: To enable you to share content from our platform to your social media accounts and interact with your connections or followers.
13.2 Information Accessed
  • Basic Profile Information: This may include your name, profile picture, username, and email address associated with your social media account.
  • Social Media Activity: We may access information about your posts, likes, comments, shares, and interactions on the respective social media platform.
13.3 Security and Data Handling

We prioritize the security and responsible handling of your private information. Rest assured, your social media data will be handled in compliance with applicable data protection laws and will not be shared with third parties without your explicit consent.

13.4 Revoking Authorization

You have the right to revoke our access to your social media information at any time. You can do so by adjusting your settings on the respective social media platform or by contacting our support team.

13.5 Third-Party Links

Our platform may contain links to third-party websites or services. Please note that these websites or services have their own privacy policies, and we are not responsible for their practices. We encourage you to review their policies before interacting with them.

14. Your Rights Regarding Data Usage

You hold several rights concerning your data usage:

  • The right to request access to your data: Verify whether we process your personal data and, if so, access a copy.
  • The right of rectification: Modify your data if inaccurate or outdated.
  • The right to erasure: Request deletion of your data. This includes situations such as when you revoke consent or object to certain data processing.
  • The right to object to processing: Disagree with data processing for personal or commercial reasons.
  • The right to request restriction of processing: Limit the extent of data processing to specific purposes.
  • The right to data portability: Obtain your data in a machine-readable format for personal or other system use.
  • The right to lodge a complaint: Contact the supervisory authority if your data is mismanaged.

For assistance or inquiries, please contact our Data Protection Officer at info@kaizup.

15. Contact Us

If you have any questions, concerns, or requests related to your privacy, data usage, or data consent, please contact our Data Protection Officer at info@kaizup.com with subject « DPO ».

We are committed to providing you with a secure and enjoyable experience while respecting your privacy. Thank you for choosing Kaizup.

Last updated: 1st January 2025

‍

1. Preamble and Privacy Commitment

Last updated: January 24, 2026 Version: 2.0 (Production)Welcome to Kaizup. The protection of your privacy, the security of your data and the transparency of our processing are at the heart of our priorities.This Privacy Policy (hereinafter the "Policy") aims to inform you exhaustively about the way in which Kaizup (hereinafter "we", "our" or "us") collects, uses, stores, shares and protects your personal data when you use our website, our SaaS application and our associated services (collectively referred to as the "Services").By accessing or using our Services, you acknowledge having read and understood this Policy. We are committed to respecting the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR"), as well as any applicable national legislation.This policy replaces and cancels all previous versions, including those relating to testing phases (Beta).

2. Key Definitions

To facilitate the understanding of this document, here are the definitions of the key terms we use:

Personal Data (or "Data"): Any information relating to an identified or identifiable natural person (hereinafter the "Data Subject"). This includes, for example, your name, email, IP address or social media identifiers.Processing: Any operation or set of operations performed on personal data, such as collection, recording, organization, storage, modification, extraction, consultation, use or destruction.Data Controller: The entity that determines the purposes and means of the processing. In the context of your account and your subscription, Kaizup acts as the Data Controller.Processor: An entity that processes personal data on behalf of the Data Controller (e.g., our hosters, our emailing tools).User: Any natural or legal person creating an account or accessing Kaizup Services.

3. Identity of the Data Controller

Personal data is collected and processed by the company publishing the Kaizup solution.

Corporate Name: KaizupGeneral contact email: info@kaizup.comFor any specific question relating to data protection, our Data Protection Officer (DPO) can be contacted directly at the address: info@kaizup.com (Indicate "DPO" in the subject line).

4. The Data we collect

In order to provide our Services, we are required to collect different types of data. We apply the principle of minimization: we only collect data that is strictly necessary.

4.1. Identity and Contact Data

This data is collected when you create an account, subscribe to our newsletter or contact us.

  • First and Last Name.
  • Professional email address.
  • Name of your company and your position (in a B2B context).
  • Login credentials (encrypted password).

4.2. Financial and Transaction Data

Since we are now in commercial version, we process data relating to your payments.

Important: Kaizup never stores your full bank card numbers or your security codes (CVC) on its own servers. Everything is delegated to our partner payment platform Stripe.

  • Purchase history, invoices, and subscription type.
  • Billing address and intra-community VAT number.

4.3. Technical and Connection Data

With each use of our Services, we automatically collect certain metadata via our servers and analysis tools.

  • IP (Internet Protocol) address.
  • Type and version of the browser.
  • Operating system.
  • Internet Service Provider (ISP).
  • Date and time of visit, time spent on pages.
  • Error logs and crash reports.

4.4. Social Media Data (API)

The core service of Kaizup being the management and analysis of social networks, we collect data via third-party APIs (Application Programming Interfaces) when you connect your accounts (Facebook, Instagram, LinkedIn, TikTok, YouTube, etc.).

  • Social identifiers: Username, page ID, access tokens (encrypted keys allowing Kaizup to publish on your behalf).
  • Public metrics: Number of subscribers, "Likes", comments, shares, video views.
  • Content: Texts, images and videos that you schedule or publish via Kaizup.

4.5. Usage Data (Analytics)

We analyze how you navigate the application to improve ergonomics.

  • Mouse paths (heatmaps), clicks on features, use of specific modules.

5. How we collect your data

We use different methods to collect data about you:

  • Direct interactions: You voluntarily communicate your data to us (registration, contact form, support chat, newsletter registration).
  • Automated technologies: During your navigation, we collect technical data via cookies, server logs and tracers (see Section 12).
  • Third parties and publicly accessible sources: We may receive technical data from analysis providers (such as Google Analytics) or profile data via the APIs of the social networks you have expressly authorized to connect to Kaizup.

6. Purposes of Processing and Legal Bases

In accordance with the GDPR, we only process your data if we have a valid legal basis. Here is a detailed table of our processing activities:

6.1. Provision of the Service (Contract)

Purpose: Account creation, authentication, access to SaaS features, publication of your posts on social networks, generation of reports.Legal Basis: Execution of the contract. The processing is necessary to provide you with the service to which you have subscribed (T&Cs).

6.2. Invoicing and Accounting Management (Legal)

Purpose: Subscription management, collection of payments, issuance of invoices, fight against payment fraud, compliance with tax obligations.Legal Basis: Legal Obligation. We are required by law to keep proof of financial transactions.

6.3. Customer Support and Assistance (Contract & Legitimate Interest)

Purpose: Responding to your technical requests, resolving bugs, assisting you in the use of the tool.Legal Basis: Execution of the contract.

6.4. Product Improvement and Security (Legitimate Interest)

Purpose: Analyzing bugs, monitoring server load, detecting intrusion attempts, improving UX (User Experience), developing new features based on overall usage.Legal Basis: Legitimate Interest. It is vital for Kaizup to maintain a secure and efficient platform.

6.5. Marketing and Communication (Consent & Legitimate Interest)

Purpose: Sending newsletters, product announcements, promotional offers.Legal Basis:Consent: For prospects who have never purchased services.Legitimate Interest: For existing customers (soft opt-in), to inform you of products similar to those already purchased. You can always unsubscribe.

7. Payment Management and Financial Security

As part of the commercial version of Kaizup, the security of your transactions is paramount.We do not directly manage financial transactions. We use a certified payment service provider (PSP): STRIPE.This provider is audited and certified PCI-DSS (Payment Card Industry Data Security Standard) Level 1, the strictest security level available in the payment industry.

  • During payment, you are redirected or connected directly to the secure servers of our provider.
  • Kaizup only receives a transaction "token" and the last 4 digits of the card to allow you to recognize your means of payment, but never has access to your full banking information.

8. Use of Social Network APIs (Specific Compliance)

Kaizup is a centralized management platform that interacts with different social networks via their official programming interfaces (API). By connecting your social accounts to our Application, you establish a direct technical link. This section details how we use this access for each platform, in accordance with GDPR transparency requirements.

8.1. Meta Services (Facebook & Instagram)

To allow the management of your Facebook Pages and your Instagram professional accounts, Kaizup uses Meta APIs. The connection is made via a secure protocol that grants us specific rights, without ever giving us access to your personal password.

  • Profile Management and Authentication: We access your email address and your public profile to validate your identity and link your digital assets to your Kaizup account.
  • Administration of Pages and Accounts: We retrieve the list of Facebook Pages and Instagram accounts for which you are an administrator. This includes access to basic settings necessary to ensure the link with your "Business Manager".
  • Publication and Content Management: Kaizup is authorized to publish, schedule or modify content (posts, images, videos) on your behalf. We also access engagement ("Likes", reactions) to allow you to follow the activity of your posts.
  • Analytics and Statistics (Insights): We extract in-depth performance data (post reach, impressions, clicks, aggregated audience demographics) to generate analysis reports within your dashboard.

8.2. LinkedIn Services (Profiles and Organizations)

Kaizup allows the management of your professional presence on LinkedIn, whether for an individual profile or an organization page (company).

  • Identity and Connection: We use authentication protocols to verify your profile and your professional email address.
  • Social Publication: We are authorized to publish messages, articles and media directly on your personal news feed or on that of the organizations you manage.
  • Organization Management: For company pages, Kaizup accesses administration functions allowing to read the organization's social feed and publish institutional content there.
  • Audience and Performance Measurement: We retrieve reach and interaction metrics for your posts as well as profile and page analytics to help you optimize your content strategy on the network.

8.3. TikTok Services

Integration with TikTok is strictly limited to content management and growth tracking features for creators and brands.

  • Basic Information and Statistics: We access public information about your account as well as usage statistics (number of subscribers, profile evolution) to offer you an overview of your performance on the platform.
  • Video Transfer and Publication: Kaizup has the necessary authorizations to download your video files to TikTok servers and publish them according to your scheduling instructions. This access allows us to manage the life cycle of your video content directly from our interface.

8.4. Privacy Guarantees related to APIs

Kaizup applies strict rules regarding data obtained via these third-party APIs:

  • Finality Principle: Data collected via these APIs is only used to provide the publication, moderation and analysis features requested by the user.
  • No Resale: Kaizup undertakes never to sell, rent or transfer this data to data brokers, advertising agencies or any other external third party.
  • Limited Storage: Only the data necessary for the display of your historical statistics is kept. Access keys (tokens) are encrypted and stored securely.
  • Right of Revocation: You keep total control. You can revoke Kaizup's access to your social networks at any time:
    • Either directly from the Kaizup interface (Account settings).
    • Or via the security settings of each platform (e.g., "Apps and websites" section in your Facebook or LinkedIn settings).
  • The revocation of access results in the immediate deletion of authorization keys and the stop of any future data collection on the account concerned.

9. Data Sharing and Processors

Kaizup will never sell your personal data to third parties. However, to operate our service, we must share certain information with trusted providers (processors) who act according to our strict instructions.

9.1. Categories of recipients

  • Hosting and Infrastructure: Hetzner to store your data on secure servers.
  • Payment Providers: Stripe to manage invoicing.
  • Emailing Tools: MailerLite to send you transactional notifications and newsletters.
  • Analysis Tools: Google Analytics to understand the use of the application (anonymized data as much as possible).

9.2. Legal obligations

We may be required to disclose your data if the law requires it (judicial requisition), or to protect the rights, property or security of Kaizup, our users or the public.

9.3. Business transfer

In the event of a merger, acquisition or sale of all or part of Kaizup's assets, your personal data could be transferred to the acquiring entity, provided that it respects the commitments of this Policy.

10. International Data Transfers

Kaizup is a company based in Europe and our main servers are located in the European Economic Area (EEA).However, some of our processors (analysis tools, emailing, etc.) may be located outside the EEA, particularly in the United States. In the case of a data transfer outside the EEA, we ensure that the transfer is framed by appropriate guarantees in accordance with the GDPR:

  • The recipient country benefits from an adequacy decision from the European Commission.
  • Or, we have signed with the provider Standard Contractual Clauses (SCC) approved by the European Commission, guaranteeing a level of protection equivalent to that of Europe.
  • We prioritize providers adhering to the EU-US Data Privacy Framework.

11. Data Security

We implement robust technical and organizational measures to protect your data against loss, unauthorized access, disclosure, alteration or destruction.

  • Encryption: All data transiting between your browser and our servers is encrypted via the SSL/TLS (HTTPS) protocol. Sensitive data stored in the database is also encrypted at rest.
  • Access control: Access to your personal data is strictly limited to Kaizup employees and contractors who need access to it for their work. They are subject to strict confidentiality obligations.
  • Monitoring: We carry out regular security audits and use intrusion detection tools.
  • Passwords: We do not have access to your password in clear text; it is "hashed" (transformed into an unreadable string of characters) before being stored.Despite these measures, no transmission over the Internet is 100% secure. We encourage you to use a strong and unique password, and to activate two-factor authentication if the option is available.

12. Data Retention Period

We only keep your data for the time necessary for the purposes for which it was collected, or to respect our legal obligations.

  • Active account data: Kept as long as your account is active.
  • Data after account deletion: If you delete your account, your personal data is erased from our active bases immediately (within 30 days maximum for technical backups).
  • Billing data: Kept for 10 years, in accordance with current accounting and tax obligations.
  • Marketing data (Prospects): Kept for 3 years after the last contact from you.
  • Technical logs: Kept for a sliding duration of 6 to 12 months for security reasons.

13. Your Rights (Details and Exercise)

In accordance with the GDPR, you have extensive rights over your data. Here is a detailed explanation of each right:

  • Right of access: You can ask us if we hold data about you and, if so, obtain a copy of it in a readable format.
  • Right of rectification: You can correct inaccurate or incomplete data directly in your account settings or by contacting us.
  • Right to erasure ("Right to be forgotten"): You can request the deletion of your data if it is no longer necessary, if you withdraw your consent, or if you object to the processing. Note that this right is not absolute (e.g., we must keep your invoices).
  • Right to limitation of processing: You can ask to "freeze" the use of your data in certain cases (e.g., while we verify the accuracy of a contested piece of data).
  • Right to portability: You can ask to recover your raw data (CSV or JSON format) to transfer it to another provider.
  • Right of opposition: You can object at any time to the processing of your data for direct marketing purposes (newsletter).
  • Right to withdraw your consent: For processing based on consent, you can withdraw it at any time (this does not call into question the legality of the processing carried out before the withdrawal).How to exercise your rights? For any request, send an email to info@kaizup.com with the subject "DPO Request". We undertake to respond within one month. In the event of a complex request, this period may be extended by two months (we will inform you if necessary).For security reasons, we may ask you for proof of identity before processing your request.If you believe, after contacting us, that your rights are not respected, you have the right to lodge a complaint with the competent supervisory authority (e.g., the CNIL in France, the APD in Belgium).

14. Cookie and Tracer Policy

During your first visit, a cookie banner allows you to accept or refuse non-essential cookies.

14.1. What is a cookie?

A cookie is a small text file placed on your terminal (computer, tablet, mobile) when visiting a site. It allows user data to be kept in order to facilitate navigation and allow certain features.

14.2. Types of cookies used

  • Strictly necessary cookies: Essential for the operation of the application (connection, security, shopping cart). They cannot be deactivated.
  • Preference cookies: Allow your choices to be remembered (language, display).
  • Analytical cookies: Help us understand the site's audience (Google Analytics). This data is anonymized.
  • Marketing cookies: Used to display relevant advertisements on other sites (retargeting).You can at any time modify your preferences via the cookie management tool present on the site or via your browser settings.

15. Notification of Data Breaches

In the event of a data breach (illegal access, leak, loss) presenting a risk to your rights and freedoms, Kaizup undertakes to:

  • Notify the competent supervisory authority within 72 hours of becoming aware of the breach.
  • Inform you as soon as possible if the breach presents a high risk for you, indicating the nature of the breach and the measures taken to remedy it.

16. Protection of minors

Our Services are exclusively intended for a professional audience and for adults capable of entering into a contract. We do not knowingly collect personal data from minors under 16. If you are a parent or guardian and you think your child has provided us with personal data, please contact us so that we can delete this information.

17. Evolution of the Privacy Policy

Kaizup being in constant evolution (addition of new features, AI, new social networks), this policy may be updated.

  • Minor changes: The "Last updated" date will be modified at the top of the document.
  • Major changes: If the changes significantly impact your rights, we will actively inform you by email or via a visible notification in the application before the changes come into effect.We invite you to consult this page regularly.

18. Contact us

For any question, comment or concern regarding this Policy or our privacy practices, do not hesitate to contact us. We are here to help.

By email: info@kaizup.com (Subject: DPO / Privacy)

‍