This policy explains what personal data TO COMPLETE: Registered legal name, exactly as on the Kbis ("Jalon Works", "we") collects, why, and what you can do about it. It covers this website and our commercial relationship with customers. It also explains the much narrower role we play with respect to data inside the InfoIQ application.
The two roles, and why the distinction matters
We are the controller for data about visitors to this website and about the people we deal with at customer and prospect organisations. That is the data described below.
For data inside InfoIQ, we are neither controller nor, in practice, processor — because the application runs entirely inside the customer's own Salesforce org and we have no access to it. Announcements, readers, reading states and analytics are the customer's records, held on the customer's Salesforce instance, under the customer's agreement with Salesforce. We cannot read them, copy them, or receive them. Where a customer requires a data processing agreement to cover the residual case — support correspondence — our DPA applies.
What we collect, and why
| Data | Why | Lawful basis | Kept for |
|---|---|---|---|
| Name, business email, company, role — when you write to us | To answer you and to manage the relationship | Legitimate interests, or performance of a contract | 3 years after our last exchange |
| Support correspondence, including anything you choose to attach | To diagnose and resolve your issue, and to keep a record of it | Performance of a contract | 3 years after the case is closed |
| Billing details, invoices, company identifiers | To invoice you and to comply with accounting law | Legal obligation | 10 years, as required by French commercial law |
| Server logs from this website (IP address, page, timestamp, user agent) | Security and availability of the site | Legitimate interests | Retained by our host per their policy, typically under 30 days |
Cookies and analytics
This website sets no cookies and runs no analytics or advertising scripts. There are no third-party trackers, no tag manager and no consent banner, because there is nothing to consent to. Our host records standard server access logs, which we do not use to build a profile of you.
The demo video on this site is served from our own domain. Playing it sets no cookie and contacts no third party.
Who we share it with
We do not sell personal data and we do not share it for advertising. We use a small number of suppliers to run the business — website hosting, business email, accounting and invoicing — each bound by a contract restricting them to processing on our instructions. The current list is available on request from support@jalonworks.com.
We disclose data to a public authority only where the law requires it, and, unless legally forbidden from doing so, we will tell the affected customer first.
Where it is stored
We select suppliers hosting data within the European Economic Area wherever a suitable one exists. Where a transfer outside the EEA is unavoidable, it is covered by the European Commission's Standard Contractual Clauses. Data inside InfoIQ is stored wherever your own Salesforce instance is, which is a matter between you and Salesforce.
Your rights
Under the GDPR you may request access to your personal data, its correction or erasure, a restriction on how we process it, a copy in a portable format, and you may object to processing based on legitimate interests. Write to support@jalonworks.com and we will answer within one month.
If the data you are asking about is inside a customer's Salesforce org — an announcement you read, or a question you asked — we cannot act on it, and you should ask your own organisation, which controls it. Tell us anyway and we will point you to the right contact where we can.
Complaints may be lodged with the CNIL, the French supervisory authority (www.cnil.fr).
Security
Our own systems use multi-factor authentication, encrypted storage and least-privilege access. The stronger protection is structural: we hold very little, and none of your announcement data, which never leaves the customer's own Salesforce organisation.
Children
This is a business product. We do not knowingly collect data from anyone under 16, and the website is not directed at children.
Changes
When we change this policy we update the date at the top. A change that materially affects customers is also emailed to the contact on the account at least 30 days before it takes effect.
Contact
- Controller
- TO COMPLETE: Registered legal name, exactly as on the Kbis, 47 Rue Vivienne, 75002 Paris, France
- Data protection contact
- TO COMPLETE: Name of the person accountable for personal data — support@jalonworks.com