Privacy Policy
This is a translation. The French version prevails.
Last updated: 6 October 2026.
This page explains which personal data Fondiva processes, why, and what your rights are. It covers the fondiva.com website, the Fondiva application (app.fondiva.com and the app on iPhone and Android) and our dealings with our customers and prospects.
Who is responsible
FONDIVA SYSTEMS, SARL with share capital of €1,000, 20 avenue Honoré Serres, 31000 Toulouse, France, Toulouse Trade and Companies Register no. 130 072 374. For any question about your data: legal@fondiva.com.
Two situations
- Fondiva is the controller of the processing described on this page: it decides how this data is used.
- Your organisation is the controller of the data entered in its workspace. Fondiva processes that data on its behalf, as a processor, under the contract between them. To exercise your rights over that data, contact your organisation. If you write to us, we forward your request to it.
What we process and why
| People | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Waiting list subscribers | Email address | Letting you know when Fondiva launches | Your consent | Until you unsubscribe, 3 years at most |
| Application users | Email address, name and photo sent by Google at sign-in; workspaces you belong to | Signing you in and taking you to your workspace | Our legitimate interest in providing the service your organisation uses | As long as your organisation keeps you as a member, or until you ask for deletion |
| Application users | IP address; reason for a refused sign-in | Protecting the service against abuse | Our legitimate interest in keeping the service secure | The limited period set by our hosting providers |
| Our customers' contacts | Name, job title, email, phone | Managing the relationship, invoicing, collection and our customer references | Our legitimate interest; our legal obligations for invoicing | During the relationship, then as long as the law requires (10 years for accounting records) |
| Prospects | Name, job title, company, email, phone, history of our exchanges | Presenting our offers to you | Our legitimate interest | 3 years after your last contact with us |
| People who write to support | Email address, content of the request | Answering your request | Our legitimate interest | During the relationship with your organisation, then 3 years |
When we do not receive this data from you, it comes from your organisation, from a person who introduced us or from public professional sources, such as your company's website.
Who receives your data
Only the Fondiva team has access to it, each person for what concerns them. Our technical providers process it on our behalf:
- Vercel Inc. (United States): hosting of the website and the application;
- Supabase Pte. Ltd (Singapore): the application's database, hosted in Paris;
- Plus Five Five, Inc., which operates Resend (United States): sending emails;
- Google Ireland Limited: sign-in to the application, Fondiva's email and documents. For sign-in, Google also processes this data under its own privacy policy.
We do not sell or rent your data.
Transfers outside the European Union
Some of these providers process data outside the European Union. These transfers are covered by the EU-US Data Privacy Framework for Vercel, Resend and Google, and by the European Commission's standard contractual clauses, in particular for Supabase. You can get a copy of these safeguards from legal@fondiva.com.
The Fondiva app on iPhone and Android
- You sign in with your Google account. Google sends us a token that confirms your identity. We only use your email address, to find the workspaces you belong to.
- The app stores nothing on your device. The sign-in token stays in memory and disappears when you close the app. It is never stored.
- Your device's language is used to show the app in French or English. It is sent to Google to show the sign-in button in the right language.
- The app does not measure audience, show ads or track you across apps. It does not access your location, contacts or calendar. In your workspace, a feature such as dictation may ask for microphone access: your device then asks for your permission.
Cookies
The fondiva.com website sets no cookies. The application only uses the cookies it needs to work (your sign-in, your language), which do not require your consent. On the web version, Google's sign-in service may use its own cookies.
Your rights
You can access your data, have it corrected or erased, restrict its use, object to its processing, in particular for prospecting, and receive a copy of it. You can withdraw your consent at any time, for example by unsubscribing from the waiting list. Write to legal@fondiva.com: we reply within one month. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
Deleting your account
Write to support@fondiva.com from your account's email address, with the subject "Account deletion". We delete your account and the data linked to it within one month. The data you entered in a workspace belongs to the organisation that manages it: we arrange its deletion with that organisation. You can also remove Fondiva's access at any time from your Google account settings.
Intended audience
The application is meant for professionals. It is not intended for people under 15.
Changes
We update this page when our processing changes. The date of the last update is shown at the top.