Privacy policy
In accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679)
1. Data controller
The data controller for personal data collected on this site is: Louis PECULIER, reachable at louis.peculier@live.fr.
2. Personal data collected
When using the Filo application, the following data is collected:
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Authentication, notifications | Performance of contract |
| First and last name | Identification within the company | Performance of contract |
| Phone number | Contact (optional) | Legitimate interest |
| Daily timesheets (time, work) | Activity management | Performance of contract |
| Site photos | Documentation of interventions | Performance of contract |
| GPS coordinates of sites | Site geolocation (optional) | Performance of contract |
| IP address, connection logs | Security, technical debugging | Legitimate interest |
3. Retention periods
- Active account data: for the duration of the service
- Data after account closure: immediate anonymisation on deletion request
- Timesheets and site data: retained in accordance with employer legal obligations
- Connection logs: 15 days (monitoring infrastructure)
- Password reset tokens: 24 hours
4. Data recipients
Your data is hosted on OVH SAS servers (France) and is not shared with third parties for commercial purposes.
Technical subcontractors used: OVH SAS (hosting).
No data is transferred outside the European Union.
5. Cookies and trackers
This site uses only strictly necessary cookies for the service:
filo-session— authentication cookie, 24 hours, httpOnly, securefilo-locale— language preference, 1 year, httpOnly
No tracking, analytics or advertising cookies are placed. No consent is required for these cookies under CNIL guidelines.
6. Your rights
Under GDPR, you have the following rights:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate data
- Right to erasure: request deletion of your account and data — via the Delete my account page or by email
- Right to data portability: receive your data in a structured format — on request by email
- Right to object: object to processing based on legitimate interest
To exercise these rights, contact us at: louis.peculier@live.fr. We respond within 30 days.
7. Security
Data is protected by appropriate technical measures: TLS encryption in transit, BCrypt password hashing, per-company data isolation, role-based access control.
8. Complaint to the supervisory authority
If you believe that the processing of your data does not comply with applicable regulations, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL).
9. Changes
This policy may be updated. The last modification date appears at the bottom of the page. In case of substantial changes, connected users will be notified.
Last updated: septembre 2026