Privacy policy

This policy explains what personal data EYE LEAD collects, why, how long it is kept and what your rights are. EYE LEAD is committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR).

1. Data controller

The data controller is LENGIGNON MORGANE (Morgane LENGIGNON), entrepreneure individuelle (EI, French sole proprietorship), trading name LM FIT, publisher of EYE LEAD, registered under SIREN number 983 875 733, whose business address is located in 76140 Le Petit-Quevilly (Seine-Maritime), France. Contact: hello@eyelead.fr.

2. Data we collect

• Account: name, email address, password (encrypted), role and preferences.
• Content you create: projects, tasks, notes, CRM contacts, invoicing data, visuals and posts.
• Payment: handled by Stripe. We never store your card number; only a Stripe customer ID and the subscription status are kept.
• Connected social networks: see section 5.
• Technical data: connection logs and usage data strictly necessary for the operation and security of the Service.
• Use of your workspace: when you use EYE LEAD from your account, the screens you open (for example “Invoices” or “Planner”), the time spent on each, the start of your sessions, the type of device (computer, phone, tablet, iPhone app) and the actions you take (creating a task, an invoice, a post…). The content you enter is never recorded for this purpose (see section 3).
• Audience measurement: only if you accept it, pages viewed, visit duration, type of device and browser, approximate geographic origin and source of the visit (see section 9).
• Advertising measurement: only if you accept it, pages viewed, browser identifier, key actions (account creation, subscription to a plan) and, in encrypted form (hashing), the information entered in our forms: email address, phone number, first and last name, city, postal code, country and, where applicable, date of birth, gender and EYE LEAD account ID, in order to measure the effectiveness of our ads on Facebook and Instagram and to show them to people likely to be interested (see section 9).

3. Purposes and legal bases

• Providing and operating the Service (performance of the contract).
• Managing subscriptions and invoicing (performance of the contract, legal obligation).
• Ensuring security and preventing fraud (legitimate interest).
• Contacting you about your account (performance of the contract).
• Understanding how the application is used, in order to improve it, support you and identify features that need to evolve (legitimate interest). These usage statistics are produced by EYE LEAD itself, without any third-party tool, are reserved for the EYE LEAD team and are never used for advertising. You can object to this at any time by writing to hello@eyelead.fr.
• Measuring the website’s audience in order to improve it (consent, which you can withdraw at any time).
• Measuring the effectiveness of our advertising campaigns on Facebook and Instagram (consent, which you can withdraw at any time).
• Collecting and keeping your cookie choices (legal obligation).

4. Processors and hosting

We use service providers that process data on our behalf, under GDPR-compliant agreements:

• Supabase, hosting of the database and files.
• Vercel, hosting of the application.
• Stripe, payment processing.
• Resend, sending of transactional emails.
• Google Ireland Ltd (Google Analytics), audience measurement, only with your consent. Data may be transferred to the United States to Google LLC, certified under the EU–US Data Privacy Framework.
• Meta Platforms (Facebook / Instagram), if you connect an account (section 5).
• Meta Platforms Ireland Ltd (Meta Pixel), measurement of our ads, only with your consent. Meta then acts as joint controller for the collection; data may be transferred to the United States to Meta Platforms Inc., certified under the EU–US Data Privacy Framework.

5. Connecting social networks (Instagram & Facebook)

If you choose to connect an Instagram account or a Facebook Page, you authorize us, through Meta’s official API, to publish on your behalf the content you schedule from EYE LEAD.

• We only access the permissions necessary for publishing and for basic reading of the connected professional profile.
• Access tokens are stored in encrypted form and are used only to publish the content you have scheduled yourself.
• We do not sell or share this data, and do not access it for any other purpose.
• You can disconnect the account at any time from your settings, or revoke access directly from your Meta account; the tokens are then deleted immediately.

6. Deletion of your data

You can request the deletion of your account and all your data at any time by writing to hello@eyelead.fr. Data linked to a connected social network (tokens, identifiers) is deleted as soon as the account is disconnected. Deletion takes effect within 30 days, unless there is a legal obligation to retain data (e.g. invoicing).

7. Retention period

Your data is kept for as long as your account is active. After deletion, it is erased within 30 days, except for accounting documents, which are kept for the applicable legal period. Data on the use of your workspace (screens opened, time spent, sessions) is kept for a maximum of 13 months, then deleted, and is erased at the same time as your account.

8. Your rights

In accordance with the GDPR, you have the right of access, rectification, erasure, portability, restriction and objection. To exercise them, write to hello@eyelead.fr. You can also lodge a complaint with the CNIL (France’s data protection authority, cnil.fr).

9. Cookies

A cookie is a small file placed on your device when you visit a website. EYE LEAD only places audience measurement or advertising measurement cookies after obtaining your consent, category by category, through the banner displayed on your first visit. If you withdraw your consent, any Google Analytics or Meta cookies already placed are deleted.

• Strictly necessary cookies (no consent required): session, authentication and security of the Service, as well as the recording of your cookie choice (eyelead_consent, stored in your browser), kept for 6 months before asking you again.
• Use of your workspace (sections 2 and 3): no cookies, no storage in your browser and no third-party tools. The screens you open are sent as you browse and grouped into visits by our servers.
• Audience measurement, Google Analytics (with consent): _ga and _ga_* cookies, which help us understand how the website is used in order to improve it. They are kept for a maximum of 13 months and the data collected for a maximum of 14 months. Until you have accepted, no Google Analytics script is loaded.
• Advertising, Meta Pixel (with consent): _fbp and _fbc cookies, which allow Meta to tell us how many people arrive from our Facebook or Instagram ads and create an account or subscribe. They are kept for 90 days. With this same consent, the information you enter in our forms (email, phone, name, location and, where applicable, date of birth, gender and account ID) may be sent to Meta in encrypted form (advanced matching) to link your visit to your Meta account. Financial, health or identity data is never sent. To make this measurement more reliable, our servers also send directly to Meta (Conversions API) the account creation, the start of the trial and the first payment, together with the same encrypted information, your IP address, your browser and the _fbp / _fbc identifiers, only if you have accepted the Advertising category. Until you have accepted, no Meta script is loaded.

Refusing these cookies has no impact on your use of EYE LEAD. You can change or withdraw your consent at any time, as easily as you gave it:

10. Changes

This policy may change. Any substantial change will be notified in the application or by email. The date of the last update appears at the top of this page.