Data Processing Agreement
Version of October 11, 2026. The French text is the reference version.
1. Purpose and parties
This agreement supplements the Recovizy Terms of Use. It is entered into between the customer, who decides why and how its contacts are processed (the controller), and Monsieur Pipeline, publisher of Recovizy, which processes those contacts on its behalf (the processor within the meaning of Article 28 of the GDPR).
The customer accepts it by ticking a box in the application, before its first import of contacts. That acceptance is recorded with its date and the version of the text.
2. Processing entrusted
- Nature: import, storage, analysis (duplicates, data quality, scoring, estimate of opportunities) and delivery of the results to the customer.
- Purpose: to provide the service described in the Terms of Use, and nothing else.
- Duration: for as long as the customer's account exists.
- Data: identity and business contact details of the contacts (name, email, phone, company, position) and sales history (activity dates, deal amounts).
- Data subjects: the customer's customers and prospects.
3. Customer instructions
Recovizy processes the contacts only on the customer's instruction, that is, to provide the service. Recovizy does not sell them, rent them or use them for its own purposes. Recovizy writes nothing to the customer's tools unless the customer has validated it.
4. Confidentiality
People authorized to access the data are bound by confidentiality and access it only when the service or a request from the customer makes it necessary.
5. Security
- Encrypted exchanges (HTTPS/TLS) between the customer, its tools and Recovizy.
- Database encrypted at rest by the hosting provider, located in the European Union (Ireland).
- Credentials for the customer's tools encrypted (AES-256).
- Isolation: each account can only access its own data.
These measures are detailed in the "CRM data protection" guide published on the site.
6. Sub-processors
The customer authorizes Recovizy to use the following providers:
- Supabase: database hosting (European Union).
- Vercel: hosting of the site and the application.
- Anthropic: artificial intelligence models used only to write a text at the customer's request. The first name, last name, position and company of the contact concerned are then sent to it.
- Qonto: payment. This provider does not receive the customer's contacts.
Any change to this list is published on this page. A customer who objects may close its account. Some of these providers are established outside the European Union; the corresponding transfers are described in the Privacy Policy.
7. Assistance to the customer
Recovizy helps the customer, within reason, to answer requests from data subjects (access, rectification, erasure) and to meet its own security obligations.
8. Data breach
If Recovizy becomes aware of a breach affecting the customer's contacts, Recovizy informs the customer without undue delay, with the information it has, so the customer can meet its own obligations.
9. What happens to the data
The customer can delete its account at any time from the application settings. Deleting the account deletes the imported contacts and the data derived from them. For an audit without a subscription, the imported contacts are deleted automatically 30 days after the report is generated. Contact backups created by the application are purged after 30 days.
10. Verification
Recovizy makes available to the customer the information needed to demonstrate compliance with this agreement. Requests go through the Contact page.
11. Governing law
This agreement is subject to the same law and courts as the Terms of Use.