01 — Politique de confidentialité

Politique de confidentialité de Solow.

La présente politique décrit le traitement des données personnelles dans l'application Solow. Solow étant une application 100 % locale, aucune donnée n'est transmise à Idea Studio ni à aucun tiers : l'ensemble des données saisies par l'utilisateur (profil, clients, factures, devis, dépenses, justificatifs) est stocké uniquement sur l'appareil de l'utilisateur.

Le contenu ci-dessous reprend, à l'identique, la politique de confidentialité accessible depuis l'écran « Réglages → Politique de confidentialité » de l'application.

02 — Responsable du traitement

Responsable du traitement.

L'utilisateur de l'application est responsable du traitement des données personnelles de ses clients, au sens du Règlement Général sur la Protection des Données (RGPD — Règlement UE 2016/679). Idea Studio SASU, éditeur de l'application, n'a pas accès à ces données et n'agit ni comme responsable de traitement, ni comme sous-traitant des données saisies dans l'application.

03 — Données collectées

Données collectées.

L'application collecte et stocke les données suivantes sur l'appareil de l'utilisateur :

• Données du profil — nom, email, téléphone, adresse, SIRET, code APE, numéro TVA, IBAN, BIC, nom de banque.
• Données clients — nom, email, téléphone, entreprise, notes.
• Données financières — factures, devis, dépenses, temps passé, frais professionnels.
• Justificatifs — photos de tickets ou de reçus attachées à un frais (stockées localement).
• Journal de transmission — trace horodatée des émissions, partages et envois de chaque facture, conservée 10 ans pour répondre à l'obligation d'audit (article L102 B du Livre des procédures fiscales).

04 — Finalité du traitement

Finalité du traitement.

Les données sont collectées dans le seul but de permettre la gestion de l'activité indépendante : suivi clients, facturation, comptabilité, et analyse financière.

05 — Stockage et sécurité

Stockage et sécurité.

Toutes les données sont stockées localement sur l'appareil de l'utilisateur. Aucune donnée n'est transmise à un serveur distant, un tiers ou un service cloud.

Les données bancaires et fiscales sensibles (IBAN, BIC, numéro de TVA) sont chiffrées au repos avec AES-256-GCM. Le numéro SIRET est stocké en clair : il s'agit d'un identifiant public disponible dans le registre Sirene, ne constituant pas une donnée confidentielle.

L'application propose un verrouillage biométrique (Face ID / Touch ID) pour protéger l'accès aux données sensibles.

06 — Durée de conservation

Durée de conservation.

Les fiches clients peuvent être supprimées à tout moment depuis l'écran client.

Lorsqu'un client a déjà fait l'objet d'une facture émise, l'application propose par défaut une anonymisation (effacement des données personnelles : nom, email, téléphone, adresse, notes) tout en préservant les pièces comptables associées. Cette double action satisfait à la fois le droit à l'effacement (RGPD article 17) et l'obligation de conservation des documents comptables 10 ans (article L123-22 du Code de commerce, article L102 B du Livre des procédures fiscales).

L'utilisateur peut tout de même choisir une suppression complète qui détruit également les pièces comptables liées — un avertissement explicite l'informe alors des conséquences légales.

07 — Droits des personnes concernées

Droits des personnes concernées.

Conformément au RGPD (articles 15 à 21), les personnes dont les données sont traitées disposent des droits suivants :

• Droit d'accès — consulter les données détenues.
• Droit de rectification — modifier les données inexactes.
• Droit à l'effacement — supprimer les données personnelles (bouton dédié sur chaque fiche client).
• Droit à la portabilité — exporter les données au format CSV.
• Droit d'opposition — s'opposer au traitement des données.

Ces droits s'exercent directement dans l'application ou auprès du responsable du traitement (l'utilisateur).

08 — Sous-traitants et transferts

Sous-traitants et transferts.

L'application ne fait appel à aucun sous-traitant et ne transfère aucune donnée à des tiers ou en dehors de l'Union européenne. Aucune donnée saisie dans l'application n'est partagée avec Idea Studio SASU, éditeur de l'application.

09 — Cookies et traceurs

Cookies et traceurs.

L'application n'utilise aucun cookie, traceur, outil d'analyse ou SDK publicitaire.

10 — Contact

Contact.

Pour toute question relative à la présente politique ou à l'application Solow, vous pouvez contacter l'éditeur : hello@ideastudio.studio.

Pour les demandes relatives au traitement de vos données personnelles en tant que client d'un utilisateur de Solow, ces demandes doivent être adressées directement à l'utilisateur (le freelance qui a saisi vos données), qui est responsable du traitement au sens du RGPD.

Toute personne dispose également du droit d'introduire une réclamation auprès de la Commission nationale de l'informatique et des libertés (CNIL) — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

Dernière mise à jour — Mai 2026

01 — Editor

Website editor.

This website, accessible at https://ideastudio.studio, is published by:

Company name

Idea Studio

Legal form

Société par Actions Simplifiée Unipersonnelle (SASU) — single-shareholder simplified joint-stock company under French law

Share capital

500 €

Registered office

22 rue des Coutures Saint-Gervais
75003 Paris, France

SIREN number

103 541 819

SIRET number

103 541 819 00019

Trade register

RCS Paris 103 541 819 — registered 2026

Activity code (APE/NAF)

58.29C — Publishing of application software

VAT number

FR 46 103 541 819

Email

hello@ideastudio.studio

02 — Publication

Director of publication.

In accordance with article 1-1, I, c) of the LCEN, the director of publication of this website is:

Full name

Dylan BENZAQUI

Role

President of Idea Studio SASU

Email

hello@ideastudio.studio

03 — Hosting

Website hosting.

This website is hosted by:

Company name

Netlify, Inc.

Postal address

44 Montgomery Street, Suite 300
San Francisco, CA 94104, United States

Phone

Not disclosed (Netlify provides support only via email and tickets)

Website

www.netlify.com

04 — Sub-processors

Data storage sub-processors.

In accordance with article 1-1, I, e) of the LCEN as amended by article 48 of the loi SREN of 21 May 2024, it is specified that the storage of data processed in connection with this service may be ensured by sub-processors distinct from the website's hosting provider.

As of the last update, this website does not process personal data through external databases. The only processing involves the receipt of emails to hello@ideastudio.studio, whose email provider is:

Email provider

OVH SAS

Address

2 rue Kellermann, 59100 Roubaix, France

Any change to this list will be reflected by an update to this page.

05 — Intellectual property

Intellectual property.

All content on the ideastudio.studio website — including, without limitation, text, images, illustrations, logos, trademarks, page structures, source code and databases — is the exclusive property of Idea Studio SASU or its licensors, and is protected under the French Intellectual Property Code and the international conventions to which France is a party.

Any reproduction, representation, modification, publication or adaptation, in whole or in part, of any element of the website, by any means or process, without the prior written consent of Idea Studio SASU is prohibited and constitutes an infringement sanctioned by articles L. 335-2 and following of the French Intellectual Property Code.

Short quotations for critical, polemical, educational, scientific or informational purposes, accompanied by the name of the author and the source, are permitted under the conditions of article L. 122-5 of the French Intellectual Property Code.

06 — Personal data

Protection of personal data.

The processing of personal data on this website is governed by Regulation (EU) 2016/679 of 27 April 2016 (the GDPR) and by law n° 78-17 of 6 January 1978 as amended, known as the French Data Protection Act.

Data controller. Idea Studio SASU, whose details appear in section 01.

Data collected. The website does not deploy any automated collection form. Personal data is only collected when a person voluntarily contacts Idea Studio by email. The data concerned is then limited to the contents of the email (name, email address, and any other data the person chooses to share).

Purposes & legal bases.

• Responding to inquiries — legitimate interest (Art. 6, 1, f GDPR)
• Managing pre-contractual and contractual relationships — performance of a contract (Art. 6, 1, b GDPR)
• Accounting and tax record-keeping — legal obligation (Art. 6, 1, c GDPR)

Retention periods. Emails are retained for at most three years after the last exchange. Accounting records are retained for ten years, in accordance with article L. 123-22 of the French Commercial Code.

Rights of data subjects. In accordance with articles 15 to 22 of the GDPR, every person has the rights of access, rectification, erasure, restriction, portability and objection regarding their data. These rights are exercised by email to hello@ideastudio.studio. A response is provided within the one-month period set by article 12, 3 of the GDPR.

Every person also has the right to lodge a complaint with the French data protection authority (CNIL — Commission nationale de l'informatique et des libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — cnil.fr.

The full detail of personal data processing and commitments is provided in a separate document: the Privacy Policy.

07 — Cookies

Cookies.

This website does not use any audience-measurement cookie, advertising cookie, or any tracker subject to prior consent under article 82 of the law of 6 January 1978 as amended and the recommendations of the CNIL. The website therefore does not display any consent banner.

Any change to this practice will be preceded by an update to this page and the implementation of a compliant consent-collection mechanism.

08 — Applicable law

Applicable law and jurisdiction.

This Legal Notice is governed by French law. Failing amicable resolution, any dispute relating to its application falls under the exclusive jurisdiction of the courts within the area of the Paris Court of Appeal.

The penalty for failing to publish a legal notice is set out in article 1-2 of the LCEN: one year of imprisonment and a €75,000 fine for natural persons, €375,000 for legal entities.

Last updated — April 2026

01 — Controller

Data controller.

The data controller for personal information processed in connection with this website and the iOS applications published under the seller name Idea Studio on the App Store is:

Legal entity

Idea Studio SASU

Registered office

75003 Paris, France

Contact

hello@ideastudio.studio

Full company details

See Legal Notice

Idea Studio has not appointed a Data Protection Officer (DPO), as the company does not meet the conditions of Article 37 of the GDPR. Privacy enquiries are handled directly by the legal representative at the address above.

02 — Scope

What this policy covers.

This policy describes how Idea Studio handles personal data in two contexts:

• This corporate website (ideastudio.studio) — limited to inbound email and contact requests.
• iOS applications published by Idea Studio on the App Store — each application also discloses its specific data practices on its App Store page (Privacy Nutrition Labels) and within the application itself, in compliance with Apple's App Tracking Transparency framework.

For specific applications, the in-app disclosure and the App Store privacy disclosure prevail in case of any apparent inconsistency with this general policy. For Solow, see the dedicated Solow privacy policy.

03 — Data collected

What we collect, and where.

On this website

The website does not deploy analytics cookies, advertising trackers, or session-tracking mechanisms. The only personal data Idea Studio receives via the website is the content of any email a visitor voluntarily sends to hello@ideastudio.studio: typically the sender's name, email address, and the content of the message.

In Idea Studio applications

Each application discloses its data collection practices in two places: the App Store privacy disclosures and an in-app privacy summary. As a default, applications collect the minimum data needed to deliver the requested feature, process data on-device wherever technically possible, and never share personal data with advertisers, data brokers, or analytics aggregators.

In commercial relationships

For clients and partners, Idea Studio processes professional contact information, billing details, and the content of communications related to the engagement. This data is handled under standard contractual confidentiality.

04 — Purposes

Purposes & legal bases.

Personal data is processed only for the specific purposes for which it was collected. Each purpose is associated with a legal basis under Article 6 of the GDPR:

Responding to inquiries

Legitimate interest of the controller in handling pre-contractual exchanges (Art. 6, 1, f).

Managing client engagements

Performance of pre-contractual measures and contracts (Art. 6, 1, b).

Legal & tax obligations

Compliance with a legal obligation to which Idea Studio is subject (Art. 6, 1, c).

Application functionality

Performance of the contract with the user, or explicit consent for optional features (Art. 6, 1, b or 6, 1, a — disclosed per feature in-app).

Security & fraud prevention

Legitimate interest in protecting the integrity of services (Art. 6, 1, f).

05 — Retention

How long we keep things.

Personal data is retained for the time strictly needed to fulfill its purpose, plus any minimum period required by law:

• Email correspondence — up to three years from the last exchange.
• Client files and contracts — up to five years from the end of the engagement, in accordance with Article 2224 of the French Civil Code.
• Accounting and tax records — ten years, in accordance with Article L. 123-22 of the French Commercial Code.
• Application-specific data — see the privacy disclosure of each application.

06 — Sub-processors

Sub-processors.

Idea Studio uses a small set of trusted infrastructure providers to operate its services. These providers act exclusively as processors on Idea Studio's behalf, under contractual data-protection terms compliant with Article 28 of the GDPR:

• Website hosting — Netlify, Inc. (44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA).
• Email infrastructure — OVH SAS (2 rue Kellermann, 59100 Roubaix, France).
• Apple, Inc. — distribution of iOS applications, App Store Connect, and Apple Push Notification service infrastructure.

The current and complete list of sub-processors is available on request from hello@ideastudio.studio.

07 — Transfers

International data transfers.

Where personal data is transferred outside the European Economic Area, Idea Studio relies on the appropriate safeguards set out in Chapter V of the GDPR, in particular:

• Adequacy decisions adopted by the European Commission (Art. 45 GDPR), where applicable;
• Standard Contractual Clauses adopted by the European Commission (Art. 46, 2, c GDPR), supplemented by additional safeguards where the assessment of the destination country requires them.

Apple's processing of App Store, App Store Connect, and Push Notification data may involve transfers to Apple infrastructure in the United States, governed by Apple's own contractual commitments.

08 — Rights

Your rights.

Under Articles 15 to 22 of the GDPR and the French Data Protection Act, individuals whose data is processed have the following rights:

• Right of access (Art. 15 GDPR);
• Right to rectification (Art. 16 GDPR);
• Right to erasure, where the conditions of Article 17 are met;
• Right to restriction of processing (Art. 18 GDPR);
• Right to data portability, where applicable (Art. 20 GDPR);
• Right to object to processing carried out on the basis of legitimate interest (Art. 21 GDPR);
• Right to withdraw consent at any time, where processing is based on consent (Art. 7, 3 GDPR), without affecting the lawfulness of prior processing;
• Right to define directives concerning the fate of personal data after death (Art. 85 of the French Data Protection Act).

These rights can be exercised by writing to hello@ideastudio.studio. Idea Studio responds within the one-month period set by Article 12, 3 of the GDPR, extended by a maximum of two months where the request requires it.

Individuals also have the right to lodge a complaint with the French data-protection supervisory authority — the Commission nationale de l'informatique et des libertés (CNIL) — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

09 — Security

Security.

Idea Studio implements technical and organisational measures appropriate to the risk presented by the processing, in line with Article 32 of the GDPR: HTTPS encryption in transit, encryption at rest where supported by the underlying provider, access controls limited to the legal representative, and a vetted set of sub-processors. In the event of a personal data breach materially affecting the rights and freedoms of data subjects, Idea Studio will notify the CNIL within seventy-two hours under Article 33 of the GDPR, and the affected individuals where required by Article 34.

10 — Children

Children.

This website and most Idea Studio applications are intended for a general audience and are not directed at children under the age of fifteen — the threshold for valid consent of a minor for information society services in France, set by Article 7-1 of the French Data Protection Act. Where an application is intended for use by children, this is disclosed on its App Store page and accompanied by appropriate consent mechanisms in line with Article 8 of the GDPR.

11 — Updates

Updates to this policy.

This policy may be updated to reflect changes in operations or in applicable law. The current version is always published at this URL. Material changes are signalled in the "last updated" date below; substantive changes affecting existing data subjects will additionally be communicated by email where reasonably possible.

Last updated — April 2026