Politique de confidentialité

Dernière mise à jour : 26 janvier 2026

Ce document est publié dans sa version de référence, en anglais.

1) Who we are

Value Props (“Value Props”, “we”, “us”) is a company established in France with offices at 34 rue Victor Massé, 75009 Paris, France.

Contact: contact@value-props.com

2) Scope (B2B)

This Privacy Policy explains how we process personal data when you:

• visit our website(s),
• create an account or use the Value Props SaaS platform (the “Services”) on behalf of a business or organization,
• contact us (sales/support).

If you use the Services through an organization (your employer/customer), that organization is typically the data controller for Customer Data (see Section 5).

3) Personal data we process

Depending on usage, we may process:

A. Account and profile data

• name, business email, organization/company name
• job title, phone (optional)
• authentication and account identifiers

B. Service usage and device data

• log data (timestamps, pages/features used)
• IP address, device/browser characteristics (where applicable)
• security and audit logs

C. Customer Data (content in the Services)

• content uploaded/created by users (which may include personal data about employees, prospects, customers, etc.)

D. Support and communications

• messages sent to us, support tickets, attachments

4) Why we process personal data

We process personal data to:

• provide, secure, maintain, and support the Services
• manage accounts, authentication, and access controls
• prevent abuse/fraud and ensure platform security
• improve the Services (performance, reliability, feature improvements)
• manage billing, contracts, and business administration
• comply with legal obligations and enforce our rights

5) Roles (Controller / Processor)

When we act as Controller: We act as a controller for data related to our own business operations (e.g., sales contacts, billing contacts, website inquiries).

When we act as Processor: For Customer Data processed within the Services on behalf of a customer, the customer is the controller and Value Props is the processor. Our processing is governed by the applicable agreement and Data Processing Agreement (DPA).

6) Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, we rely on:

• Contract (providing the Services and support)
• Legitimate interests (security, abuse prevention, improving the Services, business operations)
• Legal obligation (accounting/compliance)
• Consent (where required, e.g., certain cookies)

7) Google API data (Google User Data)

If you (or your organization) connects Google services to Value Props (for example, Google Workspace), we may request access to Google data through Google APIs only as authorized by the user and configured by the customer.

We use Google API data only to provide and operate the user-facing features of the Services, such as enabling workflows that rely on Google data (e.g., importing, syncing, or displaying authorized content/metadata as configured).

Limited Use / No Selling / No Ads

• We do not sell Google user data.
• We do not use Google user data for advertising.
• We do not use Google user data to build generalized advertising profiles.
• We limit access, use, and sharing of Google user data to what is necessary to provide and improve the user-facing features explicitly requested by the customer/user.

Sharing — We may share Google API data only with:

• our infrastructure and security service providers (subprocessors) to the extent necessary to provide the Services, and/or
• as required by law.

Retention and deletion — We retain Google API data only as long as necessary for the purposes described above and as instructed/configured by the customer (including deletion upon disconnection where technically applicable, and deletion/return upon contract termination subject to backups and legal requirements).

8) Subprocessors (service providers)

We use subprocessors to provide the Services (e.g., hosting, infrastructure, security tooling). Some optional features (such as AI features) may involve additional subprocessors if enabled by the customer.

9) International transfers

If personal data is transferred outside the EEA/UK, we use appropriate safeguards (e.g., adequacy decisions and/or Standard Contractual Clauses, plus any UK addendum where applicable).

10) Security

We implement technical and organizational measures designed to protect personal data, including access control, encryption in transit, monitoring, vulnerability management, and backup/recovery processes.

11) Data retention

We retain personal data only as long as needed for the purposes described in this policy, including contractual periods and required legal retention. Backups may persist until overwritten under normal retention cycles.

12) Your rights

Depending on your location and applicable law, you may have rights such as access, correction, deletion, objection, restriction, and portability.

If you use the Services through an organization, requests should typically be directed to your organization (the controller). We assist customers with requests concerning Customer Data as required by law and our DPA.

13) Changes

We may update this Privacy Policy from time to time. We will update the “Last updated” date and provide additional notice where appropriate.

14) Value Props Chrome Extension

When you install and use the Value Props Chrome Extension, additional data processing may occur to provide contextual features:

• Page Content and Metadata: To provide AI summaries, analysis, and contextual chat, the extension accesses the text content and titles of the web pages you visit. This access is limited to what is necessary for the AI to understand the context of your current work.
• User-Triggered Processing: Data from the pages you visit is only processed when you interact with the extension (e.g., opening the Side Panel, requesting a summary, or asking a question). We do not build a history of your browsing activity or “track” you across the web.
• No Persistence: We do not store the content of the websites you browse on our servers unless you explicitly save a summary or a chat interaction that includes specific page excerpts.
• Ad-Free / No Profiling: Data accessed via the Chrome Extension is never used for advertising, nor is it sold to third parties or used to build marketing profiles.