Privacy Policy
This privacy policy explains how ISO20022generator handles the personal data required to deliver and secure the service.
Data Controller
La Conciergerie Cassidaine (SIREN 844 284 810) is the controller for the processing performed through ISO20022generator.
Contact: iso20022generator@gmail.com – 17 avenue Augustin Isnard, 13260 Cassis, France.
Processed Data
We process the information needed to create and manage accounts (name, email, organisation), to handle subscriptions and payments through Stripe, and to respond to messages submitted via our contact or support forms.
Technical logs and security-related events may also be collected to guarantee availability and protect the platform.
Imported Banking Data
Imported banking data (IBANs, BICs, debtor or creditor details, amounts, references) is used solely to generate the requested ISO 20022 files.
Except for the emitter profiles you choose to save, this information is not retained: it is deleted immediately after generation and is never stored on our servers.
Legal Bases & Purposes
Processing is based on the performance of the contract (providing the service), our legitimate interest in securing the platform and supporting users, and our legal obligations for invoicing and accounting.
Retention Periods
Account data is kept for as long as the subscription remains active and then archived for the statutory period.
Support or contact messages are stored for up to three years.
Security-related technical logs are retained for twelve months.
Recipients & Processors
Stripe manages billing and payment information. Authentication relies on NextAuth.
Application hosting is provided by Vercel (USA). Transactional emails are sent through the configured SMTP provider or Resend.
When analytics is enabled, we favour cookie-free solutions such as Plausible.
Data Subject Rights
Under the GDPR, you benefit from the following rights:
- right of access, rectification, erasure and portability;
- right to object to processing and to request restriction;
- right to define instructions on the fate of your data after death.
Exercising Your Rights
You can exercise your rights by emailing iso20022generator@gmail.com or by writing to the registered office.
You also have the right to lodge a complaint with the CNIL (cnil.fr).
Cookies & Analytics
We default to cookie-free analytics solutions. If Google Analytics is enabled, Consent Mode is activated to respect user choices.
