Privacy Policy

Last updated: February 2026

1. Data Controller

[Company name]
[Address]
Email: contact@billea.fr

2. Data Collected

Via the Shopify Application (shopify.billea.fr)

• Shopify store information (name, domain, email)
• Order data (number, amounts, items) for invoice generation
• Customer information (name, address, email) appearing on invoices
• Billing data (invoices, credit notes, sequential numbers)

Via the Marketing Website (billea.fr)

The marketing website does not collect any personal data. No tracking cookies are used. No analytics tools are deployed.

3. Purpose of Processing

• Generation of invoices and credit notes compliant with French regulations
• Sending invoices by email to the store's customers
• FEC export (standardized accounting file) for bookkeeping
• Subscription management via Shopify Billing

4. Legal Basis

Data processing is based on the performance of the contract between the merchant and Billea (Shopify app installation) and on legal obligations regarding invoicing.

5. Hosting and Security

All application data is hosted in France on OVHcloud servers (Roubaix, France). No data transfers outside the European Union.

Data is protected by encryption in transit (TLS) and at rest. Invoices are cryptographically chained (SHA-256) in compliance with the VAT anti-fraud law.

6. Data Retention

• Invoices and credit notes: 10 years (legal accounting obligation)
• Shopify session data: duration of the app installation
• Technical logs: 90 days

7. Your Rights

Under the GDPR, you have the right to access, rectify, erase, restrict, port and object to data processing. To exercise your rights, contact us at contact@billea.fr.

You may also file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr.

8. Sub-processors

• OVHcloud (Roubaix, France) — server hosting and S3 storage
• Brevo (Paris, France) — transactional email delivery (SMTP)
• Shopify (Canada) — e-commerce platform and billing, data processed per Shopify DPA

9. Shopify GDPR Compliance

Billea implements all mandatory Shopify GDPR webhooks: customer data request, customer data erasure, and shop data erasure.