ISO 20022 Generator
ISO 20022Generator
Privacy

Privacy Policy

This privacy policy explains how ISO20022generator handles the personal data required to deliver and secure the service.

Data Controller

La Conciergerie Cassidaine (SIREN 844 284 810) is the controller for the processing performed through ISO20022generator.

Contact: iso20022generator@gmail.com – 17 avenue Augustin Isnard, 13260 Cassis, France.

Processed Data

We process the information needed to create and manage accounts (name, email, organisation), to handle subscriptions and payments through Stripe, and to respond to messages submitted via our contact or support forms.

Technical logs and security-related events may also be collected to guarantee availability and protect the platform.

Imported Banking Data

Imported banking data (IBANs, BICs, debtor or creditor details, amounts, references) is used solely to generate the requested ISO 20022 files.

Except for the emitter profiles you choose to save, this information is not retained: it is deleted immediately after generation and is never stored on our servers.

Legal Bases & Purposes

Processing is based on the performance of the contract (providing the service), our legitimate interest in securing the platform and supporting users, and our legal obligations for invoicing and accounting.

Retention Periods

Account data is kept for as long as the subscription remains active and then archived for the statutory period.

Support or contact messages are stored for up to three years.

Security-related technical logs are retained for twelve months.

Recipients & Processors

Stripe manages billing and payment information. Authentication relies on NextAuth.

Application hosting is provided by Vercel (USA). Transactional emails are sent through the configured SMTP provider or Resend.

When analytics is enabled, we favour cookie-free solutions such as Plausible.

Data Subject Rights

Under the GDPR, you benefit from the following rights:

  • right of access, rectification, erasure and portability;
  • right to object to processing and to request restriction;
  • right to define instructions on the fate of your data after death.

Exercising Your Rights

You can exercise your rights by emailing iso20022generator@gmail.com or by writing to the registered office.

You also have the right to lodge a complaint with the CNIL (cnil.fr).

Cookies & Analytics

We default to cookie-free analytics solutions. If Google Analytics is enabled, Consent Mode is activated to respect user choices.