Privacy Policy

1. Introduction

This privacy policy describes how EMILIOO SAS ("Emilioo", "we") collects and processes your personal data when you use the website agentyque.com (the "Site"), a product developed by EMILIOO SAS.

Emilioo processes your data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable French legislation.

2. Data Controller

3. Data Collected

Depending on your use of the Site, we may collect the following categories of data:

3.1 Data you provide to us

When you contact us (early access, contact), we may collect: first name (if provided), email address, company name (if provided), message content and information you choose to share.

3.2 Technical data (limited collection)

During your browsing, certain technical data may be processed to ensure the operation and security of the Site: IP address, browser type and operating system, strictly necessary browsing information (requests, pages viewed).

3.3 Data obtained via Google Sign-In

When you choose to sign in with Google, we receive the following information from Google: email address and name associated with your Google account. This data is used solely to create and manage your Agentyque account. We do not access any other data from your Google account (contacts, files, calendar, etc.).

3.4 Data obtained from Meta services (Facebook / Instagram)

When you connect a Meta account (Facebook Login) or link Meta assets (Facebook Pages, ad accounts, Business Manager) to the Agentyque platform, we receive information from Meta interfaces only within the permissions you grant. Depending on your configuration, this may include: public profile identifier and name, list of Pages you administer, information about your Meta businesses, identifiers and metadata for advertising campaigns and ads, and engagement metrics where the corresponding permission has been accepted.

This data is used to provide the features you enable in Agentyque: advertising performance management and analysis, AI-assisted reports and recommendations, and enrichment of context within your workspace. It is not sold to third parties and is not used for targeted advertising outside the service. Where applicable, certain data may be processed by our technical or AI providers strictly to operate the service and in line with our contractual commitments.

When you visit agentyque.com, Meta trackers (for example the Meta Pixel and, where applicable, server-side Conversions API) may be used to measure the effectiveness of our marketing campaigns and site usage, under the conditions shown in our cookie banner when present and in accordance with applicable settings.

When you act on behalf of an organization (brand, agency, client company), you warrant that you have the necessary authorizations to connect the relevant Meta assets and, where required, that you inform the individuals concerned.

You can revoke Agentyque's access to Meta at any time from your Facebook / Meta account settings for apps and websites and from the integrations available in Agentyque. To request deletion of associated data stored by Agentyque, email us at contact@agentyque.com; we will handle your request within the timeframes set out under "Your Rights".

3.5 Data obtained from Shopify (store connector)

When you connect your Shopify store to Agentyque, we access the following data read-only, through the Shopify Admin API and strictly within the permissions granted (read_products, read_customers, read_orders): your product catalog (titles, descriptions, prices, images, links); your customers subscribed to your email marketing — customer identifier, email address, first and last name, language, tags, number of orders and total amount spent, marketing consent state and date; your orders — identifier, date, status, amount and purchased products. We do not collect phone numbers, postal or shipping addresses, or payment data.

This data is used exclusively to provide the email marketing features you enable: building and segmenting your audience, personalizing emails (first name, language, products), triggering your automations (purchase, new customer) and inserting your products into your campaigns. It is not sold, is not used for advertising outside the service, and is not subject to any automated decision producing legal or similarly significant effects on individuals.

Only customers whose marketing status in Shopify is "subscribed" are imported as subscribers; non-subscribed or unsubscribed customers never receive emails from Agentyque, and every email sent contains an unsubscribe link that takes effect immediately. You remain the data controller for your customers' data; Agentyque acts as a processor, on your behalf and under your instructions.

You can disconnect the store at any time from Agentyque's integrations or by uninstalling the app from your Shopify admin: access tokens are destroyed immediately and the data imported from Shopify (contacts and related events) is deleted within 48 hours of uninstallation, in line with Shopify's compliance webhooks. We also honor access and erasure requests forwarded by Shopify on behalf of your customers within a maximum of 30 days. Access to this data is logged.

4. Purposes and Legal Bases

We process your data for the following purposes:

• Complying with our legal obligations (where applicable). Legal basis: legal obligation.
• Ensuring the operation and security of the Site (abuse prevention, diagnostics, protection). Legal basis: legitimate interest.
• Responding to your requests (contact, early access). Legal basis: pre-contractual measures and/or legitimate interest.
• Meta integrations and marketing measurement (Facebook login, advertising and Page data linked to your account when you enable the integration; measurement via Meta Pixel on the site). Legal basis: performance of a contract and/or legitimate interest; where applicable law requires it, consent for non-strictly necessary trackers.

5. Data Recipients

Your data is accessible only to authorized persons within Emilioo and our technical service providers acting as processors (hosting, messaging, security), only to the extent necessary to provide their services.

Meta products (Facebook / Instagram) also process data as a separate platform: when you enable a Meta connection or Meta trackers, information is transmitted to Meta in accordance with Meta's applicable terms and policies.

We do not sell your data.

6. Limited Use of Google Data

Agentyque's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Agentyque will not use data obtained via Google Sign-In for:

• targeted, personalized, or retargeted advertising
• sale to data brokers or any other third parties
• creditworthiness assessment or financial scoring
• training artificial intelligence models or building databases
• any purpose unrelated to providing and improving the Agentyque service

7. Transfers Outside the European Union

Certain technical service providers may be located outside the European Union. In such cases, transfers are governed by appropriate safeguards in accordance with the GDPR (for example, standard contractual clauses).

8. Data Retention

• Security-related technical data: retained for a limited duration, proportionate to security needs.
• Prospects: maximum 3 years from the last active contact.
• Request-related data: retained for the time needed to process the request, then archived if necessary.
• Google authentication data: retained as long as your Agentyque account is active. Deleted within 30 days of account deletion.
• Meta integration data: retained while the Meta connection or integration is active in your Agentyque account, then deleted or anonymized within a reasonable period after you disconnect or remove the integration, unless a legal obligation requires longer retention.
• Data obtained from Shopify: access tokens destroyed upon disconnection or uninstallation; contacts and events imported from Shopify deleted within 48 hours of the app being uninstalled, or upon a customer erasure request forwarded by Shopify. The access log (containing no personal data) is retained for 24 months for evidentiary purposes.

9. Your Rights

In accordance with the GDPR, you have the following rights: access, rectification, erasure, objection, restriction, portability (in certain cases), withdrawal of consent (only when processing is based on consent).

You may request the deletion of your account and all associated data at any time. Your account and data will be deleted within 30 days of your request.

To exercise your rights: contact@agentyque.com. You may also file a complaint with the CNIL.

10. Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration.

11. Cookies and Trackers

The Site uses elements that are strictly necessary for operation and security. Meta trackers (including the Meta Pixel and, where applicable, related server-side measurement) may be placed to assess the effectiveness of our marketing campaigns; where applicable law requires prior consent, it is collected through the mechanism displayed on the Site (cookie banner or equivalent).

Strictly technical elements may be used by the infrastructure to ensure the operation and security of the Site.

12. Updates

We may modify this privacy policy. The current version is the one published on this page, with the update date.