Privacy policy

The data controller is Techmood SAS, a French simplified joint-stock company with a share capital of €30,000, RCS Rouen 932 695 109, whose registered office is at 72 rue de la République, 76140 Le Petit-Quevilly, France, publisher of Qwitch, hereinafter "we". Contact person for personal data: Pierre Cognin, President, reachable at pierre@techmood.io.

For the searches, lists and notes of a workspace, the customer using Qwitch is the controller and we act as processor. For our own databases, for the opt-outs and for the operation of the service, we are the controller.

If you use Qwitch: your name, your work email, your company and your role, the answers of your seller profile (what you sell, to whom), your LinkedIn profile and your mailbox if you connect them, your searches, your lists and your notes, the messages you approve and their log, the log of your workspace, the billing data (except the card number, which only the payment provider holds).

If you are a professional Qwitch has found: your name, your role and your employer, your public professional profile and its address, the location of your position, the public signals about you or your company (press, web, registers, public talks), and, at a user's request, your work email and your work mobile number. Never sensitive data, never a home address.

Prospect data comes:

• from the official French company register (identity, activity, headcount, establishments, legal officers);
• from professional databases and public registers, supplied by providers established in the European Union and in the United States, which collect public or declared professional data;
• from what companies publish on their website and from the online press;
• from the public activity of a LinkedIn profile, read with the account of the user who asks for it, one profile at a time or on a selection and one click.

Every fact is kept with its source and its date, and shown that way on the card.

• Providing the service to its users (account, workspace, billing, support): performance of the contract; keeping invoices: legal obligation.
• Finding and qualifying decision-makers for our customers' business-to-business prospecting, and suggesting messages for them to reread: legitimate interest of the customers and of Qwitch, limited to people contacted in the context of their role, with a simple and definitive right to object.
• Drafting a summary and messages from the facts of the card, by an artificial intelligence model: same basis; no automated decision is made about the person.
• Sending the messages you approve from your connected accounts, and keeping their log: performance of the contract.
• Keeping the register of opt-outs: legal obligation.
• Securing the service (access log, abuse prevention): legitimate interest.
• Measuring the site's audience: your consent, which you may withdraw at any time.

If you no longer want to appear in Qwitch, write to pierre@techmood.io with your name and your employer, or reply to the message you received: the user who contacted you marks you "do not contact" and passes your request on to us. Your opt-out is global and permanent: it applies to every workspace of every one of our customers, it overrides any cached data, it is recorded with no time limit. You no longer show up in any batch, you are no longer added to any list, exported to any file, suggested for any follow-up. Where you already appeared, your card is greyed out and marked "do not contact". No user can read the list of people who opted out.

You also have a right of access, rectification, erasure, restriction and portability, at the same address. We answer within one month. Proof of identity may be requested when there is a doubt.

If you use Qwitch, you can delete your account from your settings: the subscription is stopped, the connected accounts disconnected, your sign-in account deleted, your searches, lists and notes erased. What remains in our backups is deleted or anonymised within 90 days, except what the law requires us to keep.

• Facts about a company (website, sector, headcount): 180 days, then read again at the source.
• Facts about a person (current position, location): 30 days.
• Context and signals of a card (summary): 14 days.
• Professional contact detail found: as long as it is not contradicted by a more recent source, withdrawn at your request or covered by an opt-out.
• Person looked up with no contact detail found: the lookup is not repeated for 90 days.
• Searches, batches, lists, notes, sent messages and log of a workspace: as long as the workspace exists, then deleted or anonymised within 90 days of its closure.
• User account: the duration of the subscription, then deleted or anonymised within 90 days of closure.
• Invoices and accounting records: ten years, the legal period.
• Opt-outs: with no time limit, that is their purpose.
• Cookie choice: one year.

Data is neither sold nor transferred. It is processed by us and, on our behalf, by the following sub-processors, with their role and their location:

• Hosting of the application, the database and the backups: Amazon Web Services EMEA SARL (Luxembourg), eu-west-1 region in Ireland.
• Artificial intelligence model (interpreting the sentence, qualification, summary, drafting): Anthropic models, served by Amazon Web Services (Amazon Bedrock) in the European Union; as a fallback, by Anthropic PBC from the United States.
• User authentication (account, sign-in with LinkedIn, Google or email): Clerk Inc. (United States).
• Payment, invoicing and VAT computation: Stripe Payments Europe Ltd (Ireland), with Stripe Tax; only Stripe holds the card number.
• Platform emails (invitations, sign-in, billing): Postmark, a service of ActiveCampaign LLC (United States).
• Connection of your LinkedIn account and your mailbox, reading of the public activity of profiles, sending in your name of the messages you approve: Unipile SAS (France).
• Audience measurement, only if you accept it: PostHog, hosted in the European Union.
• Professional databases and public registers (company identity, professional profiles, professional contact details): providers established in the European Union and in the United States, which receive the name, role and employer of the person looked up.
• Fonts of the site, loaded from a third-party service that sees the visitor's IP address: Adobe Fonts (Adobe Systems Software Ireland Ltd, Ireland).

The connectors to a CRM (HubSpot, Pipedrive, Odoo, lemlist) send only what you choose to send, to your own account. The MCP server exposes your workspace only to the assistant you gave a key to.

Our data is hosted in the European Union. Some sub-processors are established in the United States or process data there: authentication, the sending of platform emails, the artificial intelligence model when it is called as a fallback, and part of the professional databases. These transfers rest on the European Commission's standard contractual clauses, supplemented, where the provider is certified, by the EU-US Data Privacy Framework. The data sent to the artificial intelligence model is that of the card (name, role, employer, public facts), never your billing data.

The website and the application only use the necessary cookies: your session once signed in, and the memory of the step you are at. Audience measurement comes on top, only if you accept it: the banner asks on your first visit, refusing is as easy as accepting, and your choice is kept for a year. The “Manage cookies” link at the bottom of the page lets you change it.

This measurement counts visits and helps us understand journeys: pages viewed, steps completed, errors met. It is hosted in Europe. It receives no name, no e-mail, no phone number and none of the names of the professionals found; in session recordings, what you type is masked.

Each workspace is isolated from the others by the database itself, not only by the screen: a list a member cannot see does not exist for them. Exchanges are encrypted in transit. Technical access is personal and logged. The providers' keys are never in the code.

The host encrypts the database and its automatic backups at rest. To report a vulnerability: pierre@techmood.io.

For any question or request about your data: pierre@techmood.io, or by post to Techmood SAS, 72 rue de la République, 76140 Le Petit-Quevilly, France. If you believe your rights are not respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, France, www.cnil.fr.