Last updated: August 2025

1. Data Controller

The processing operations described in this policy are carried out by:

NOVA PROSPECT, a limited liability company (LLC) under US law, operating the akyras brand

Registered office: USA

Representative in the European Union (Article 27 GDPR): Julien Moisson, 35 rue de la République, 39400 Hauts-de-Bienne, France

akyras has not appointed a data protection officer. Any question about your data may be sent to the address above or to the representative in the European Union.

2. Scope

This policy applies to the personal data that akyras processes on its own behalf, namely the data of:

visitors to the website https://akyras.com/ and its language versions;
8. Rights of individuals
customers and their contacts (managers, employees, account users);
users of the public demo instance.

It does not apply to the data that customers record in their own management instance (customers, suppliers, employees, invoices, synchronised bank transactions, etc.). For such data, the customer is the controller and akyras acts as processor, under the conditions of Annex 1 of the General Terms and Conditions of Sale. Data subjects should contact the customer company first.

2. Data collected

Depending on your relationship with akyras, the following categories of data may be processed:

Identification: surname, first name, job title, company;
Contact details: email address, telephone, business postal address;
Business data: company name, SIREN/SIRET or registration number, VAT number;
Orders and billing: offers subscribed to, invoices, payment history. Full payment card details are processed by Stripe or PayPal and are not stored by akyras;
Account and usage: login credentials, two-factor authentication settings, preferences, history of actions in the customer area;
Technical data: IP address, connection and server logs, browser and device type;
Communications: emails, support tickets and requests;
9. Cookies

These data are collected directly from you or from the company on whose behalf you act, or automatically when you use the website and services. Mandatory fields are indicated in the forms; without them, the order or account creation cannot be completed.

Demo instance: its login credentials are public and any data entered there is visible to all visitors and deleted periodically. Do not enter any real data.

3. Purposes and legal bases

Account creation and management
Ordering, payment and billing — performance of the contract;
Legal basis
Support and technical assistance
Service security, logging, fraud prevention — akyras’s legitimate interest in protecting its systems and customers;
Handling of complaints, payment disputes and litigation — legitimate interest;
Email prospecting to professionals regarding offers related to their business — legitimate interest, with the option to object at any time and without giving reasons;
Newsletter — consent, which may be withdrawn at any time;
Website audience measurement — consent, collected via the cookie banner;
Measuring the effectiveness of akyras advertising campaigns (Google Ads) and, where applicable, retargeting — consent, collected via the cookie banner;
Provision of the demo instance — legitimate interest.

5. Retention periods

Account data: duration of the relationship + 3 years after termination.
Communications and support tickets: during the contractual relationship, then three (3) years;
Invoices and accounting records: period required by applicable accounting and tax obligations, up to a maximum of ten (10) years;
Prospects: three (3) years from the last contact initiated by the prospect;
Technical and security logs: one hundred and eighty (180) days;
Consent
Demo instance: until its periodic reset.

At the end of these periods, the data are deleted or anonymised. They may be kept longer where necessary for the establishment, exercise or defence of legal claims.

5. Recipients

The data are accessible, within the limits of their duties, to authorised persons acting for akyras (technical management, support, sales). They may be disclosed to:

Hetzner Online GmbH, infrastructure hosting provider: production server in Germany, backups in Finland;
Stripe and PayPal, payment service providers, which act for payment processing in accordance with their own privacy policies;
akyras’s technical service provider, established in France, which administers the servers, hosts the akyras.com website and sends emails from its own servers, hosted by Hetzner in Germany;
Google Ireland Limited (Google Analytics, Google Ads), only if you have accepted statistics or marketing cookies;
LinkedIn and X, to display our latest posts, only if you have accepted marketing cookies;
Powens or Tink, authorised account information aggregators, only when the customer activates a bank connection provided by akyras;
administrative or judicial authorities, where required by law.

akyras neither sells nor rents your personal data.

6. Transfers outside the EU

The services and their backups are hosted in the European Union. However, as NOVA PROSPECT is established in the United States, access to the data by akyras or on its behalf from outside the European Economic Area constitutes a transfer within the meaning of the GDPR.

These transfers are governed by the standard contractual clauses adopted by the European Commission (Implementing Decision (EU) 2021/914). Transfers carried out by Stripe, PayPal, Google, LinkedIn and X are based on their certification under the EU-US Data Privacy Framework or on standard contractual clauses.

A copy of the applicable safeguards can be obtained on request from contact@akyras.com.

8. Security

Akyras implements technical and organisational measures:

encryption of storage volumes and backups;
two-factor authentication for administrative access and the option to enable it for customer accounts;
isolation of customer instances;
permission management and access logging;
infrastructure monitoring and automatic encrypted backups, stored off-site in a separate data centre located in Finland.

As no system can guarantee absolute security, akyras reviews these measures regularly.

9. Your rights

In accordance with the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:

right of access to your data;
right to rectification;
right to erasure;
right to restriction of processing;
right to data portability;
right to object, in particular to prospecting, without having to give reasons;
right to withdraw your consent at any time, without affecting processing carried out previously;
right to set instructions regarding the fate of your data after your death.

You can exercise these rights by email to contact@akyras.com or by post to the representative in the European Union. If there is reasonable doubt about your identity, proof of identity may be requested. akyras replies within one (1) month, which may be extended by two (2) months for complex or numerous requests; you will be informed if this is the case.

You have the right to lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr) or with the supervisory authority of your country of residence or work.

10. Cookies

The website uses cookies that are strictly necessary for its operation, which do not require consent. Audience measurement cookies (Google Analytics, via Google Site Kit), advertising conversion measurement cookies (Google Ads) and social media content (LinkedIn, X) are only placed after your consent, collected via the cookie banner. Consent signals are transmitted to Google via Google’s Consent Mode: if you refuse, no Google cookie is placed. You can change your choices at any time.

Details of the cookies used are provided in the Cookie Policy: https://akyras.com/politique-de-cookies-ue/.

11. Automated decision-making

akyras does not take any decision producing legal effects or significantly affecting you based solely on automated processing, including profiling.

10. Data Breach

In the event of a personal data breach for which akyras is the controller, akyras notifies the CNIL and any competent supervisory authority within seventy-two (72) hours where required by law, and informs the data subjects where the breach is likely to result in a high risk to their rights and freedoms.

For data processed on behalf of customers, akyras informs the customer concerned under the conditions of Annex 1 of the General Terms and Conditions of Sale.

11. Amendments

This policy may be amended to take account of legal or technical developments or changes to the services. Each version bears a number and a date. In the event of a substantial change, customers are informed by email or in their customer area before it takes effect.

12. Contact

For any question about this policy or your data: contact@akyras.com.

Privacy Policy – Akyras