Data protection (GDPR)

Data controller

The data controller is NeoBlok, publisher of this service. For any question about your data, email contact@neoblok.com.

Full company details (legal name, registration number, address) to be completed in the legal notice.

Data we collect

• Account data: name, business email, organization, role.
• Usage data: connection logs, in-app actions, technical metadata.
• Billing data: legal name, address, payment information.

Purposes and legal bases

• Service delivery and account management — performance of contract.
• Security, logging and fraud prevention — legitimate interest.
• Billing and accounting — legal obligation.
• Marketing communications — consent, withdrawable at any time.

Hosting and location

Data is hosted in France, in certified datacenters, with no extra-EU dependency. No transfer outside the European Union occurs without appropriate safeguards.

Retention periods

• Account data: for the duration of the contract, then legal archiving.
• Security logs: up to 12 months.
• Billing data: 10 years (accounting obligation).

Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection. Exercise them at contact@neoblok.com. We respond within one month.

Processors and DPA

NeoBlok binds its processors through data processing agreements (DPA) compliant with Article 28 GDPR. The list of processors is available on request.

Security

Encryption in transit and at rest, access control, SSO/MFA, audit logs and rights governance protect your data at every layer.

Complaint

You may lodge a complaint with the French supervisory authority CNIL (cnil.fr) if you believe your rights are not respected.