Privacy policy

GDPR — last updated: August 2026.

Data controller

Gabin Tournier (Entrepreneur individuel (micro-entreprise)), SIRET 953 826 757 00015 — contact: contact@igoria.fr.

Data collected

Account: first name, last name, email, phone, company, password (hashed — never readable in clear).
Locations & reviews: the listings you connect, their reviews and the replies, via the permissions you grant (Google Business Profile…).
Platform connections: access tokens, encrypted at rest, revocable in one click.
Contact & newsletter: the information you send us and, where applicable, your newsletter sign-up email.
Technical: activity and security logs necessary for the proper operation of the service.
Payment: billing and subscription data processed by our provider Stripe. For referral payouts, your bank details (IBAN) are entered directly with Stripe (Connect) — never stored on our servers.
Audience measurement: first-party visit statistics (page views, unique visitor via a signed cookie), with no third-party advertising tracker.

Purposes & legal bases

Provide the service (detecting, writing and publishing replies) — performance of the contract.
Billing and subscription management — legal obligation / contract.
Support and product improvement — legitimate interest.
Newsletter — consent, withdrawable at any time (1-click unsubscribe).
Improving Igor: the replies you approve or edit are kept to personalise and improve its suggestions, per location — legitimate interest.

No data is sold. Igor never publishes without your approval, except when Autopilot mode is voluntarily enabled.

Sub-processors & transfers

To provide the service, we use the following providers:

Google (Gemini API) — AI reply generation (United States (standard contractual clauses)).
Hostinger — site hosting and email sending (SMTP) (European Union).
Google Business Profile — retrieving and publishing reviews (with the client's authorisation) (United States (standard contractual clauses)).
Stripe — subscription payment processing (European Union).

Transfers outside the European Union are governed by the European Commission's standard contractual clauses.

Retention period

Account data is kept as long as the account is active, then deleted within 30 days after closure. Reviews and access tokens are kept only as long as needed for the service. Billing data is kept in line with legal accounting obligations.

Your rights

Access, rectification, erasure, portability, restriction and objection. Write to contact@igoria.fr. You may also refer the matter to the CNIL (cnil.fr) in the event of a dispute.

For any request regarding your personal data, a dedicated contact is available: rgpd@igoria.fr.

Cookies

Igoria only uses a strictly necessary session cookie for login. No third-party advertising trackers, so no intrusive consent banner.