You are reading version 1.0, which is no longer in effect. Read the current version (1.1).
Privacy Policy
What personal data Asrar collects when you use Playfair, why, and your rights.
On this page (12 sections)
This Privacy Policy explains how Asrar SAS (“Asrar”, “we”) processes personal data when you use Playfair (the “Service”).
1. Who is responsible
The controller is Asrar SAS, 12 Rue de l’Exemple, 75002 Paris, France. Contact: privacy@asrar.example.
2. Controller and processor
We are the controller for account, billing, security and marketing data. For personal data contained in the data sources you connect (“Customer Data”) we act as a processor under the Data Processing Addendum.
3. The data we collect
- Account data: name, email address, password hash, language and time zone.
- Workspace data and content: workspace settings, members, questions, dashboards and descriptions.
- Consent records: documents accepted, date, IP address and user agent.
- Usage and log data: features used, queries executed, errors, device and browser information, IP address.
- Billing data: plan and invoices. Card data is handled by our payment provider.
4. Purposes and legal bases
We use data to provide the Service (contract), to secure it and prevent abuse (legitimate interest), to keep evidence of consent and meet accounting obligations (legal obligation), and to send marketing emails if you opt in (consent).
5. Sharing
We share data with the subprocessors listed on the Subprocessors page, with your organisation’s administrators for workspaces they control, and with authorities when required by law. We do not sell personal data.
6. International transfers
Where data is transferred outside the European Economic Area, we rely on adequacy decisions or Standard Contractual Clauses.
7. Retention
We keep account data for the life of the account and delete it within 30 days of deletion. Logs are kept for up to 12 months; billing records for as long as the law requires.
8. Security
We encrypt data in transit and at rest, encrypt credentials and limit staff access.
9. Your rights
You have the right to access, rectify, erase, restrict and port your data, to object to processing and to withdraw consent. Write to privacy@asrar.example. You may also complain to the Commission Nationale de l’Informatique et des Libertés (CNIL).
10. Cookies
See the Cookie Policy.
11. Changes
We will notify you of material changes.
12. Contact
Asrar SAS · 12 Rue de l’Exemple, 75002 Paris, France · privacy@asrar.example