Bilanea

Privacy

Privacy policy

We collect the strict minimum to provide the service, we train no model on your documents and you keep control of your data at all times.

Data collected

  • Account data: first and last name, email address, hashed password, language, declared profile, organisation
  • Uploaded accounting documents and generated reports, attached to your organisation
  • Billing data processed by Stripe (we store no card number)
  • Technical data: IP address, user agent and timestamp of sensitive actions (audit log)
  • Messages exchanged on the marketplace and signed non-disclosure agreements

Purposes and legal bases

Processing is based on the performance of the contract (provision of analyses and the marketplace), on our legal obligations (invoicing, accounting retention) and on our legitimate interest (security, fraud prevention, service improvement). Marketing communications are only sent with your consent, revocable at any time from your profile.

Processors

Hosting and database in the European Union; payments by Stripe; transactional emails by Resend; extraction of scanned documents and writing of summaries by the Anthropic API, whose professional terms exclude training on transmitted data. Each processor is bound by a GDPR-compliant data processing agreement.

Retention periods

  • Documents and reports: as long as your organisation exists, or until manual deletion
  • Account: until deletion; personal data is then anonymised
  • Invoices: ten years (legal obligation)
  • Audit log: twelve months
  • Technical logs: thirty days

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. Most can be exercised directly from your workspace (JSON export, document deletion, account deletion). For any other request or to contact the data protection officer, use the contact form. You may also lodge a complaint with the supervisory authority.

Cookies

The website only uses strictly necessary cookies: the authentication session cookie and, where applicable, a theme preference stored locally. No advertising cookie or third-party tracker is set, which exempts us from displaying a consent banner.