Privacy Policy
Last updated : August 14, 2026
This policy describes how Benjamin TOUCHARD ("we"), publisher of the RestoreProof service, collects, uses and protects personal data under the General Data Protection Regulation (GDPR — EU 2016/679) and French data protection law.
The core of this policy: your organization's backup data and infrastructure secrets (credentials, access keys, passwords) never leave your infrastructure. Only cryptographically signed reports and orchestration metadata (execution statuses, aggregated metrics) reach our platform. See the Security page for details on this architecture.
1. Data controller
The controller for personal data processing is:
Benjamin TOUCHARD
SIREN: 453 597 023
Contact: by email: hello@restoreproof.io
2. Data collected
2.1 Account data
When creating an account, we collect: first and last name, professional email address, organization name, password (stored hashed), as well as the technical metadata required for the Service to operate (runner identifiers, restore plan configuration).
2.2 Billing data
Payments are processed entirely by our provider Stripe. we does not collect or store any card data; only non-sensitive information (Stripe customer ID, subscription status, billing history) is retained on the Control Plane side.
2.3 Usage data and audience measurement
The site uses Umami, a privacy-friendly, self-hosted analytics tool that sets no cookie and collects no data that could individually identify a visitor (no IP address retained, no fingerprinting). The resulting statistics are aggregated and anonymous. As a result, no cookie consent banner is required for this audience measurement.
2.4 Orchestration metadata from the Runner
The Runner, running on the Customer's infrastructure, only transmits to the Control Plane: execution statuses, technical metrics (duration, size, result codes), and reports signed in the Ed25519 format. None of this contains the backup content or the secrets used to access it.
3. Purposes and legal bases of processing
| Purpose | Legal basis |
|---|---|
| Providing and operating the Service | Contract performance |
| Billing and subscription management | Contract performance / legal obligation |
| Customer support | Contract performance / legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Product improvement (anonymous audience measurement) | Legitimate interest |
4. Retention periods
- Account data: retained for the duration of the subscription, then deleted or anonymized within 12 months of cancellation, unless a longer legal retention period applies.
- Verification reports: retained according to the retention period tied to the subscribed plan (7 days on Free, 90 days on Starter, 365 days on Pro), then automatically purged.
- Billing data: retained for 10 years in accordance with French accounting and tax obligations.
5. Recipients and processors
Your data may be shared with the following processors, strictly to the extent necessary to provide the Service:
- Stripe (Stripe Payments Europe, Ltd) — payment and billing processing;
- Scaleway SAS — hosting of the Control Plane infrastructure.
We do not sell or rent your personal data to third parties for commercial or advertising purposes.
6. Transfers outside the European Union
Some processors (in particular Stripe) may process data outside the European Union. In that case, such transfers are governed by appropriate safeguards (European Commission standard contractual clauses or an equivalent adequacy mechanism).
7. Your rights
Under the GDPR, you have the following rights over your personal data: right of access, rectification, erasure, restriction of processing, objection and portability. You can exercise these rights by contacting us at hello@restoreproof.io. You also have the right to lodge a complaint with the French data protection authority (CNIL — www.cnil.fr).
8. Data security
Communications between the Runner and the Control Plane are encrypted with TLS 1.3. Access to the Control Plane is protected by authentication and strict per-organization isolation (tenant isolation). Reports transmitted are cryptographically signed (Ed25519) to guarantee their integrity.
9. Cookies and trackers
The site does not use advertising cookies or third-party trackers. Audience measurement is provided by Umami, self-hosted and cookie-free (see §2.3). Only a strictly necessary technical cookie may be used to keep your session authenticated within the application; it does not require consent under Article 82 of the French Data Protection Act.
10. Changes to this policy
This policy may be updated to reflect changes to the Service or to applicable regulations. Any material change will be notified to you by email or via the Service.
For any question relating to your personal data, contact us at hello@restoreproof.io.