Privacy Policy

DMV DEMOVEO is the data controller for account, billing, and security data. For documents uploaded by Customers, it acts as a data processor under the Data Processing Agreement.

Data we collect

Data	Purpose	Legal basis	Retention
Name, work email, company, role	Create and manage accounts	Contract	Until account deletion
Password	Sign-in, stored in hashed form by our authentication provider	Contract	Until account deletion
Profile photos and company logos, publicly accessible by link	Display them to the team	Contract	Until removed, or until account deletion
Documents uploaded to project libraries, stored privately and readable only by project members and the administrator	Provide the service to the Customer, as a processor	Contract	Until deleted by the Customer, or until the organization is deleted
Billing details, VAT number, invoices	Billing and accounting	Contract and legal obligation	10 years for accounting records
Session and security logs	Secure the service and limit shared accounts	Legitimate interest	To be confirmed
Transactional emails	Invitations, confirmations, password resets	Contract	To be confirmed

Card numbers are collected directly by Stripe. We never receive or store them.

Recipients

Data is shared only with our subprocessors, and with authorities when the law requires it. We do not sell personal data.

International transfers

Our database is hosted in the European Union. When a provider processes data outside the European Economic Area, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses.

Your rights

You can request access, correction, deletion, restriction, portability, or object to processing. Write to contact@sauwe.com. You can also complain to the CNIL, the French data protection authority.

You can change your name and password, or delete your account, in your profile.