OUVIORA·

Ouviora / Privacy notice

Privacy notice

Version 2026-10-13 · ZIYØN SAS

This notice explains how ZIYØN SAS handles personal data when people use Ouviora. Each construction organization also controls the project and client information it uploads and shares.

Who is responsible

ZIYØN SAS, 60 rue François Ier, 75008 Paris, France, is responsible for Ouviora account administration, security and service communications. A construction organization decides the purposes and recipients of its client, site, team and commercial records; ZIYØN processes those records to provide the service under that organization’s instructions. For a request about project content, contact the construction organization first or write to us and we will direct the request.

Data we handle

Account and contact details include names, email addresses, roles and authentication identifiers. Organizations may add client contact details, site addresses, photos, field notes, expenses, receipts, quotes, invoices, payment references and related documents. We also process device, network and service event data needed for authentication, security, delivery and troubleshooting. The app may keep supported queued work locally until it synchronizes.

Why and on what basis

We use account data to create and operate accounts and provide the requested service (contract), to secure the service and prevent misuse (legitimate interests), and to meet applicable accounting or legal duties (legal obligation). Organizations determine the legal basis for personal data they enter about clients, workers and other contacts; they must give those people the information required by law. We do not use project content for public marketing.

Who can see data

Authorized organization members see data according to their roles. Invited client contacts see only resources explicitly shared with them. Our hosting, database, email delivery and, when enabled, payment providers process data to provide their services under appropriate agreements. We disclose data to authorities only when legally required.

Storage and international access

Ouviora uses Supabase for authentication and data services and Vercel for web/API delivery. Service providers may process or access some data outside the European Economic Area; applicable contractual safeguards and provider arrangements govern such transfers. Ask us for information about the safeguards relevant to your data. Do not assume that every copy or support access is confined to one country.

Retention and security

We retain account and organization data while the service is used. After closure, we keep only data needed for applicable legal obligations, dispute resolution and limited backup cycles, then delete or de-identify it according to the relevant retention schedule. The organization can request export or deletion of available records, subject to legal duties. We use access controls, encrypted transport and restricted credentials; no internet service can guarantee absolute security.

Your rights

Depending on the processing and applicable law, you may request access, correction, erasure, restriction, portability or objection. If processing depends on consent, you may withdraw it without affecting earlier lawful processing. Write to contact@ziyon.fr; we may need to verify your identity. You may also complain to the CNIL (cnil.fr) or your local supervisory authority.

Updates and contact

We will publish material changes with a new version and provide additional notice where required. Privacy questions and rights requests can be sent to contact@ziyon.fr or ZIYØN SAS at the registered address above.