Privacy Policy
Your personal data is protected.
GDPR Compliance: This policy is compliant with the General Data Protection Regulation (GDPR) and the French Data Protection Act. This policy applies to the use of the Pliyos platform.
1. DATA CONTROLLER
Company: LTA Smarttech Solutions
Address: 60 rue françois premier, 75008 Paris
Email: privacy@pliyos.com
DPO: Non applicable
2. COLLECTED DATA
2.1 Data of B2B Clients (Restaurateurs)
- Identification data: Last name, first name, email, name of establishment
- Billing data: Address, VAT number, Stripe payment information
- Technical data: IP address, connection logs, usage preferences
- Usage data: Usage statistics, consultation analytics
2.2 Data of End Users (Customers scanning the QR code)
- Consultation data: Anonymized IP address, device type, system language, viewed dishes
- Technical cookies: Storing the guest's preferred menu language
- No intrusive collection: No name, first name, or email required to view a menu
2.3 Menu Data
- Menu content: Dish names, descriptions, prices, declared allergens
- Media: Uploaded dish photos and establishment logos
- Statistics: Number of QR scans, peak hours (anonymized)
3. YOUR GDPR RIGHTS
🔍 Right of Access
Know what data we hold about you
✏️ Right of Rectification
Correct inaccurate or incomplete data
🗑️ Right to Erasure
Delete your data under certain conditions
📦 Right to Portability
Retrieve your data in a readable format
How to exercise your rights: Contact us at privacy@pliyos.com with proof of identity. Response within 1 month maximum.
4. DATA SECURITY
- TLS 1.3 encryption for all communications in transit
- AES-256 encryption for databases and files stored at rest
- Automated daily encrypted backups
- Data access restricted to strictly authorized personnel
- Continuous monitoring of intrusion attempts and immediate patches
5. RETENTION PERIOD
- Active accounts: Duration of subscription + 1 year
- Billing data: 10 years (French legal accounting obligation)
- Security and connection logs: 1 year maximum
- Terminated accounts: Permanent deletion within 90 days (excluding billing data)
- Deletion requests: Fulfilled within 30 days upon request (subject to legal obligations)
6. DATA SHARING
- Stripe: Secure processing of subscriptions and payments (PCI DSS certified)
- Mailjet: Routing of transactional, connection, and alert emails (GDPR certified)
- Hosting: Secure Vercel servers and database located in the EU
- Absolute guarantee: No selling, renting, or transmission of your data to third parties for advertising purposes
7. CONTACT AND COMPLAINTS
DPO: privacy@pliyos.com
Customer Support: support@pliyos.com
CNIL: www.cnil.fr (in case of unresolved complaint or dispute)
Last updated: October 10, 2025 | Version: 1.1
← Back to Home