Privacy Policy
Last updated: 10/12/2026
GDPR Commitment
B2B Finance CRM is designed to comply with the General Data Protection Regulation (GDPR). The platform is hosted in France and your rights can be exercised at any time.
1. Data Controller
The data controller is:
2. Data Collected
We only collect data necessary for the operation of our service:
- Identification data: name, surname, email, phone
- Professional data: company, position, industry
- Connection data: IP address, logs, technical cookies
- Usage data: interactions with the platform
3. Processing Purposes
Your data is used to:
- Provide and improve our services
- Manage your account and subscriptions
- Contact you for customer support
- Comply with our legal obligations
- Secure our platform and prevent fraud
4. Legal Basis
The processing of your data is based on:
- Contract execution: to provide our services
- Legitimate interest: to improve our services and security
- Consent: for marketing communications (opt-in)
- Legal obligations: retention of accounting data
5. Data Hosting
Hosting in France
- Platform and database: dedicated server administered by B2B Finance, in France
- Email sending: Scaleway, Paris (France)
- Subscription payments: Mollie (payment service provider, Netherlands). B2B Finance stores no banking data.
- Backups: encrypted every day before any off-site copy
Some technical subprocessors may be established outside the European Union (network routing, encrypted copy of backups, certain backup AI services). These transfers are governed by the safeguards provided for by the GDPR and each subprocessor is listed in our register, available on request.
6. Your GDPR Rights
In accordance with the GDPR, you have the following rights:
Right of access
Obtain a copy of your data
Right to rectification
Correct your inaccurate data
Right to erasure
Delete your data (right to be forgotten)
Right to portability
Retrieve your data in a standard format
7. Retention Period
We retain your data for the strictly necessary duration:
- Account data: duration of subscription + 1 year
- Billing data: 10 years (legal obligation)
- Connection logs: 1 year maximum
- Cookies: 13 months maximum
8. Security
We implement strict security measures:
- Strict isolation of data between clients at the database level
- TLS encryption of data in transit
- Two-factor authentication (TOTP) and revocable sessions
- Daily encrypted backups, kept for 30 days
- Role-based access control
- Audit log of changes and security events
9. GDPR contact
To exercise your rights or for any questions about your data:
Complaint: If you believe your rights are not being respected, you can file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr