Privacy policy

Data controller

KEA Thérapie, publisher of GESTE & PERFORMANCE, is the controller of account and service-usage data. For data about followed persons entered by a professional, the client organisation is the controller and KEA Thérapie acts as processor.

Data collected and purposes

• Identity and contact (name, e-mail), login credentials: account creation and management — performance of contract.
• Organisation and role data: provision of the service and access control — performance of contract.
• Assessments, measurements, videos and consents entered by professionals: provision of the service — performance of contract; explicit consent for videos.
• Messages sent to contact@gesteperformance.com: support — legitimate interest.
• Technical data (IP address, device, usage and audit logs): security, fraud prevention, product improvement — legitimate interest.
• Billing data: accounting and tax obligations — legal obligation.

Recipients

Data is shared only with: our technical providers (hosting, storage, e-mail delivery); if the organisation enables it and the person consents, the Lovable AI gateway and an OpenAI model without retention of exchanges, for Performance-area drafts based on pseudonymised data (never the name or identity); Paddle.com, our Merchant of Record, for sales, subscription management, payments, tax compliance and invoicing; our professional advisers (legal, accounting); authorities where required by law.

International transfers

Some providers may process data outside the European Union. These transfers are covered by adequacy decisions or the European Commission's standard contractual clauses.

Retention

Account data is kept for the duration of the subscription, then 30 days after access ends before deletion. Billing data is kept for 10 years (legal obligation). Technical logs are kept for at most 12 months. Data is then deleted or anonymised.

Security

We apply appropriate technical and organisational measures: encrypted exchanges, private video storage with temporary links, strict access control by organisation and by area, audit log.

Your rights

Under the GDPR, you have rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent. To exercise them, contact KEA Thérapie at contact@gesteperformance.com; we reply within one month. You may lodge a complaint with the CNIL (cnil.fr).

Cookies

We only use cookies and local storage essential to operation (login session, preferences). No advertising cookies are used. You can manage them in your browser settings.