Privacy policy

BME Consulting SARL, 113 Rue Marietton, 69009 Lyon, France, is responsible for the processing of your personal data. Contact: contact@smart-contract.com.

Account: email address, name, role (client or vendor), preferred language, and your password, stored only in encrypted (hashed) form.

Free tools: when you download a brief, your email address, your answers to the form and your choice about receiving news. The calculators store nothing: they run in your browser.

Quote requests: when you create your account from the quote request form, your email address and your answers are recorded as soon as you send the form, even before you confirm your account, so that we can follow up on your request. Your answers are also kept in your browser until the request is created.

Use of the platform: the information you enter as the features open, such as project briefs, quotes and messages.

Contracts and invoicing: the contracts declared on the platform (parties, amount, dates) and, for vendors, the invoicing details of the company (legal name, address, VAT number, invoicing email), the commission invoices and their payment status. A VAT number of the European Union is checked with the European Commission (VIES).

Technical data: IP address, browser and access logs, kept by our providers to secure the service.

Prospecting: for the companies of the directory, the professional email address and name of a contact, found on the company's public website, and whether that person opted out.

Providing the service (account, sign-in, requests, quotes, service emails, sending a requested brief): performance of the contract you accept when creating an account, or of the request you make when downloading a brief.

Following up a brief request (contacting you about the project you described): our legitimate interest in answering a professional request. You can object at any time.

News: only if you tick the box, with your consent, withdrawable in one click.

Security (preventing abuse and fraud, technical logs): our legitimate interest in protecting the platform and its users.

Contracts and commissions (recording the contracts declared by clients and vendors, applying the independence rule, invoicing the commission to the vendor): performance of the contract accepted when declaring or confirming a contract.

Legal obligations (keeping invoices and accounting records): compliance with the law.

Prospecting of directory companies (one email inviting a company to claim its listing): our legitimate interest in presenting the platform to professionals, about their activity. Every email offers a one-click opt-out.

Your data is accessible only to BME Consulting and to the providers that run the service on our behalf: Supabase (database and authentication, hosted in Frankfurt, Germany), Vercel (site hosting), Resend (email delivery), Stripe (commission invoices and their payment, for vendors), Google (audience measurement with Google Analytics, only if you accept it) and Anthropic (the AI that drafts briefs from the answers you enter in the brief generator; Anthropic does not use this data to train its models).

When you send a request, the brief is shared with the vendors you invite. A vendor's public profile is visible to visitors. A declared contract is visible to both of its parties. This list will be updated when new providers are added.

Platform data is stored in the European Union. Vercel, Resend, Stripe and Anthropic, US companies or groups, may process data outside the European Union: technical data for Vercel, email addresses and messages for Resend, invoicing details of vendors for Stripe, brief generator answers for Anthropic, audience measurement data for Google, if you accept it. These transfers are covered by the safeguards provided by the GDPR, such as the European Commission's standard contractual clauses.

Account data is kept as long as your account is active. You can delete your account at any time from the My account page: your profile is then erased. When you delete your account, the requests of the client organizations you were the only member of are deleted with it, including the quotes and messages they received. Data left with a free tool, or with the quote request form before an account is confirmed, is kept for three years after your last contact with us, then deleted. Contracts, commissions and invoices are accounting records: they are kept for ten years, even after an account is deleted (a client organization with a contract is then kept without its members).

A prospecting contact is kept three years after the email, then deleted; an address that opted out is kept only to never email it again.

The site uses strictly necessary cookies: the session cookie that keeps you signed in, the language cookie and, during construction, the private access cookie. Your choice of light or dark mode, and your choice about audience measurement, are stored in your browser only.

Audience measurement: with your consent only, Google Analytics places the cookies _ga and _ga_* (13 months at most) to count visits and pages viewed. Nothing is loaded before you accept; IP addresses are not stored by Google Analytics, and advertising features and Google signals are disabled. You can change your choice at any time with the Cookies link at the bottom of each page; your choice is asked again after six months. There is no advertising or social network tracker.

You can access, correct and erase your data, restrict or object to its processing, and ask for a copy in a portable format. Write to contact@smart-contract.com; we answer within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

We will update this policy as the platform evolves. The date at the top of the page shows the current version.