In brief
iasyo collects the data needed to measure your business's visibility in AI answers, send you your results and manage your subscription. No data is sold or used for advertising. You can export your data and delete your account from your client area, and unsubscribe from emails in one click.
Who processes your data
Patrick Aquatias, sole trader trading as Agence Web Meozz, who publishes iasyo.com and whose full details appear in the legal notice, is the controller of the processing described here. For any question: bonjour@iasyo.com.
For Done-for-you, when the team works on a website that contains personal data, iasyo acts as the client's processor, under the data processing agreement published on the website.
For people in the United Kingdom, the UK GDPR also applies. Our representative in the United Kingdom under Article 27 of the UK GDPR: [nom et adresse du représentant au Royaume-Uni].
The data we process, and why
| Situation | Data | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| Visiting the website | IP address in the server logs, anonymised for visit statistics | Website security; measuring website traffic | Legitimate interest | Logs: 6 months; statistics: 25 months |
| Free SEO tools | The text or address analysed, processed without being stored; anti-bot check signals | Providing the result; blocking bots | Legitimate interest | Not stored; only anonymous counters are kept |
| Free audit | Website address, email, results, IP address | (1) Carrying out the audit, sending the result, limiting audits to one per website every 30 days; (2) sending tips and offers, if you have ticked the box provided for this purpose | (1) Legitimate interest and steps taken at your request before entering into a contract; (2) consent, which you can withdraw in one click | Result page: 30 days; data: 3 years without activity |
| Order and account | Company name, SIREN number, VAT number, company number or UID number, address, name and email of the account holder and users, payment history | Performing the contract, invoicing, managing the account | Contract; legal obligation for invoices | 24 months after the end of the subscription; invoices: 10 years |
| Measurements and results | Website, brand, questions, competitors, reference sheet, AI answers, recommendations | Providing the service | Contract | 24 months after the end of the subscription |
| Chat and messages | Name, email, messages, and their translation | Answering your questions | Contract for clients; legitimate interest for visitors | 3 years after the last exchange |
| Done-for-you | Website access details, encrypted; log of viewings and changes | Carrying out the fixes securely | Contract | Access details: deleted at the end of Done-for-you; log: 1 year |
| Customer reviews | Name, email, order reference | Inviting you to leave a review, with no incentive | Legitimate interest | In line with Trustpilot's policy |
Emails with tips and offers contain no individual tracking pixel.
Service providers
iasyo entrusts certain tasks to service providers, who only use the data for those tasks. Audience measurement (Matomo, based on the server logs), the chat (Chatwoot) and error tracking (GlitchTip) are installed on iasyo's server: their data is not sent to any third party.
| Service provider | Role | Data sent | Country |
|---|---|---|---|
| IONOS | Hosting of the website and data | All service data | [Pays du centre de données] |
| Stripe | Payment | Business identity, email, card details entered on Stripe | Ireland, United States |
| Brevo | Sending emails | Email address, email content | France |
| OpenAI, Anthropic, Perplexity | Querying AI platforms, analysing answers, writing recommendations, translating messages | Questions, public website content, reference sheet, answers to analyse, messages to translate | United States |
| DataForSEO | Collecting answers from ChatGPT, Gemini and AI Overviews | Questions, language, country | Estonia, and its own providers |
| Cloudflare | Anti-bot check | IP address, browser | United States |
| Trustpilot | Review invitations | Name, email, order reference | Denmark |
| Indy | Accounting | Invoice data | France |
| [Plateforme agréée de facturation électronique] | Transmission of invoices | Invoice data | [Pays] |
iasyo uses the business offerings of these AI providers, whose terms exclude the use of the data sent to train their models. [À vérifier pour chacun avant la mise en ligne.]
Transfers outside the European Union
When a service provider processes data outside the European Union, the transfer is governed, depending on the provider, by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses. [Le cadre retenu est indiqué pour chaque prestataire avant la mise en ligne.]
Security
- Encrypted connection across the whole website, and login to the client area via a single-use link, with no password to remember.
- Access details for client websites stored encrypted, viewable by the team after two-factor authentication, each viewing being logged.
- Two-factor authentication for the team area.
- Backup every night, with a copy kept outside the main server.
- Automatic security updates, and continuous monitoring of the website.
Your rights
You can access your data, have it rectified or erased, restrict its processing, object to it, and obtain a copy of it in a reusable format. Where processing is based on your consent, in particular for emails with tips and offers, you can withdraw your consent at any time, in one click. You can also set out instructions on what happens to your data after your death.
- From your client area: export your data and reports, at any time, and delete your account, once your commitment has ended.
- By email: bonjour@iasyo.com. iasyo replies within one month.
- With the CNIL: if you believe that your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority, at cnil.fr.
- With the authority in your country: in the United Kingdom, the Information Commissioner's Office (ICO), at ico.org.uk; in Ireland, the Data Protection Commission, at dataprotection.ie.
Artificial intelligence
Recommendations are written by an AI, then approved by a iasyo expert. No decision producing legal effects concerning you is based solely on automated processing.
Changes to this policy
Any significant change is announced to clients by email, and dated at the top of this page.
