1. Introduction
FINORYS SAS, publisher of the Invokap platform, is committed to protecting the privacy of its users. This policy describes how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR).
2. Data controller
FINORYS SAS
218 rue Fleming, 62400 Béthune, France
Email: contact@finorys.eu
3. Data collected
We collect the following categories of data:
3.1 Identification data
- First and last name
- Email address
- Phone number
- Postal address
3.2 Professional data
- Company name
- SIREN/SIRET number
- KYC documents (ID, company registration, bank details)
- Invoices and commercial documents
3.3 Browsing data
- IP address
- Browser type
- Pages visited
- Cookies (see our cookie policy)
4. Purposes of processing
Your data is processed to:
- Manage your account and authentication
- Verify your identity and that of your company (KYC)
- Process your invoice assignment requests
- Communicate with you about your transactions
- Comply with our legal and regulatory obligations
- Improve our services
5. Legal basis
Processing is based on:
- Contract performance: account management and assignments
- Legal obligations: anti-money laundering, accounting retention
- Legitimate interest: service improvement, security
- Consent: newsletter, non-essential cookies
6. Data recipients
Your data may be shared with:
- Our KYC verification partners
- Our regulated payment partners
- Our technical providers (hosting, security)
- Competent authorities when required by law
7. Transfers outside the EU
We prioritise European providers. Where data is transferred outside the EU, we ensure appropriate safeguards are in place (standard contractual clauses, adequacy decisions).
8. Retention periods
- Account data: duration of the relationship + 5 years
- KYC/KYB documents: 5 years after the end of the relationship (AML obligations)
- Assignment contracts and contractual documents: 10 years
- Invoices and accounting records: 10 years
- Electronic signatures and related evidence: 10 years
- Browsing data: 13 months maximum
- Security logs: 365 days
9. Your rights
Under the GDPR, you have the following rights:
- Access: obtain a copy of your data
- Rectification: correct inaccurate data
- Erasure: request deletion of your data
- Restriction: limit processing
- Portability: receive your data in a structured format
- Objection: object to processing
To exercise your rights: log in to your account (export / deletion request) or contact contact@finorys.eu
10. Security
We implement appropriate technical and organisational measures to protect your data: SSL/TLS encryption, access control, backups and system monitoring.
11. Cookies
Invokap uses strictly necessary cookies (session, security) and, where applicable, language preference cookies. No third-party advertising or analytics cookies are deployed on the current version. See our cookie policy for details.
12. Changes
This policy may be updated. We will notify you of any material change by email or via the platform.
13. Complaint
You may lodge a complaint with the CNIL (French data protection authority): www.cnil.fr
14. Contact
For any question about the protection of your data:
Email: contact@finorys.eu
Address: Finorys SAS - DPO, 218 rue Fleming, 62400 Béthune, France