Dirigeo Privacy Policy
Last updated: 9 September 2026
This English translation is provided for information only. In the event of any discrepancy, the French version shall prevail.
DIRIGEO, a French SAS with share capital of €1,000, registered with the Paris Trade and Companies Register under number 104 450 747, whose registered office is at 66 avenue des Champs-Élysées, 75008 Paris, France (hereinafter “Dirigeo”, “we”), attaches great importance to the protection of your personal data.
The purpose of this privacy policy (hereinafter the “Policy”) is to inform you, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (“GDPR”) and amended French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties (“French Data Protection Act”), of how Dirigeo collects and processes your personal data when you visit the dirigeoo.com website and/or use the Dirigeo platform (hereinafter together the “Service”).
1. Data controller
The controller of the personal data processing described in this Policy is DIRIGEO, represented by Mr Khalil Bouajila, President.
Contact for any question about your personal data:
- Email: contact@dirigeoo.com
- Postal address: DIRIGEO, 66 avenue des Champs-Élysées, 75008 Paris, France
2. Data collected
Depending on how you use the Site and the Service, Dirigeo may collect the following categories of data:
2.1 Data you provide directly
- Identification and contact data: surname, first name, email address, phone number, job title, company;
- Account data: login credentials, password (stored in encrypted form);
- Billing data: billing address, EU VAT number, billing history (bank card data itself is processed directly by our payment provider Stripe, see Article 4);
- Data entered when using the Service: accounting, financial and tax data you enter on the Platform (invoices, quotes, expenses, projects, budgets, etc.), including, where applicable, data relating to your own customers or suppliers that you provide to us;
- Data exchanged with our customer support (correspondence, support requests).
2.2 Data collected automatically
- Connection and browsing data: IP address, browser type, pages viewed, dates and times of connection, log data;
- Data from cookies and trackers placed on the Site, described in detail in our Cookie Policy, in particular:
- technical cookies strictly necessary for the Service to function;
- audience measurement cookies (Google Analytics);
- advertising and retargeting cookies (in particular Google Ads, Meta Ads), placed only with your consent.
3. Purposes and legal bases of processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and managing the User Account | Performance of the contract (Art. 6.1.b) |
| Providing the features of the Service (invoicing, financial tracking, dashboards, etc.) | Performance of the contract (Art. 6.1.b) |
| Managing subscriptions, invoicing and payment | Performance of the contract (Art. 6.1.b) and legal accounting/tax obligations (Art. 6.1.c) |
| Managing customer relations and support | Performance of the contract / legitimate interest (Art. 6.1.b and 6.1.f) |
| Improving and securing the Site and the Service (audience measurement, fraud prevention) | Legitimate interest (Art. 6.1.f) and/or consent for non-essential cookies |
| Commercial prospecting and marketing communications (newsletters, offers) | Consent (Art. 6.1.a) or legitimate interest for B2B prospecting within legal limits (Art. 6.1.f) |
| Targeted advertising and retargeting (Google Ads, Meta Ads) | Consent (Art. 6.1.a) |
| Compliance with legal and regulatory obligations (accounting, tax, anti-money laundering where applicable) | Legal obligation (Art. 6.1.c) |
| Handling requests to exercise rights and complaints | Legal obligation / legitimate interest |
4. Recipients of the data
Personal data is intended for Dirigeo’s authorised internal departments (technical teams, customer support, accounting), within the limits of their respective responsibilities.
It may also be shared with the following processors and partners, acting on behalf of Dirigeo under a contract compliant with Article 28 of the GDPR:
- OVH SAS (OVHcloud) — hosting of data and technical infrastructure, France;
- Stripe Payments Europe, Limited — online payment processing;
- Google Ireland Limited (Google Analytics, Google Ads) — audience measurement and advertising, subject to your consent to the relevant cookies;
- Meta Platforms Ireland Limited (Meta Ads) — targeted advertising, subject to your consent to the relevant cookies;
- where applicable, the technical providers required for customer support, sending emails or hosting third-party tools used by Dirigeo.
Dirigeo ensures that its processors provide sufficient guarantees in terms of data protection and security.
Dirigeo does not sell or rent your personal data to third parties for commercial purposes.
5. Transfers of data outside the European Union
Some of our partners (in particular Google and Meta, for the tools mentioned in Article 4) may transfer data to countries outside the European Economic Area (EEA), in particular the United States.
Where such transfers take place, Dirigeo ensures that they are covered by appropriate safeguards within the meaning of the GDPR (in particular the European Commission’s standard contractual clauses, or any applicable adequacy decision, such as the EU-US Data Privacy Framework where the recipient is certified under it).
6. Retention period
| Type of data | Retention period |
|---|---|
| Account data and Service data | For the entire duration of the contractual relationship, then archived for the applicable statutory limitation period after the Account is closed |
| Billing and accounting data | 10 years from the end of the financial year concerned (legal accounting and tax obligations) |
| Prospecting data (non-customers) | 3 years from the last contact, unless you object or unsubscribe earlier |
| Cookies and audience measurement / advertising data | 13 months maximum from the time the cookie is placed (CNIL recommendation) |
| Customer support data | 3 years from the closure of the request |
At the end of these periods, the data is deleted or anonymised, unless a longer retention period is required by law.
7. Data security
Dirigeo implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including: password encryption, access control, hosting with a certified provider, regular backups and data protection awareness training for our teams.
In the event of a personal data breach likely to result in a risk to your rights and freedoms, Dirigeo undertakes to notify the breach to the French data protection authority (CNIL) as soon as possible and, where applicable, to inform you in accordance with the applicable regulations.
8. Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights over your personal data:
- Right of access: to obtain confirmation that your data is being processed and to receive a copy of it;
- Right to rectification: to have inaccurate or incomplete data corrected;
- Right to erasure (“right to be forgotten”): to request the deletion of your data, under the conditions laid down by the regulations;
- Right to restriction of processing;
- Right to data portability, where applicable;
- Right to object, in particular to the processing of your data for commercial prospecting purposes or on the basis of legitimate interest;
- Right to withdraw your consent at any time for processing based on consent (in particular non-essential cookies), without affecting the lawfulness of processing carried out before withdrawal;
- Right to set instructions regarding the use of your data after your death.
You can exercise these rights by sending a request:
- by email to contact@dirigeoo.com;
- by post to DIRIGEO, 66 avenue des Champs-Élysées, 75008 Paris, France.
Proof of identity may be requested if there is reasonable doubt about your identity.
You also have the right to lodge a complaint with the French data protection authority (CNIL): 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr
9. Cookies
The use of cookies and trackers on the Site and the Service is described in detail in our Cookie Policy.
10. Changes to this Policy
Dirigeo reserves the right to amend this Policy at any time, in particular to comply with any legal, regulatory, case-law or technical developments. You will be informed of any substantial change by email or by notification on the Platform. The date of the last update appears at the top of this document.
11. Contact
For any question about this Policy or the processing of your personal data:
- Email: contact@dirigeoo.com
- Phone: +33 7 45 88 20 04 (Monday to Saturday, 8:00 am to 5:00 pm, Paris time)
- Postal address: DIRIGEO, 66 avenue des Champs-Élysées, 75008 Paris, France