This English translation is provided for convenience. The French version prevails.
Data controller
Lucas Bourdeau, publisher of Kotelys. Contact: contact@kotelys.fr.
On this website
- No cookies. Fonts are hosted on the website itself: no data is sent to a third-party service during your visit.
- Audience measurement: the website counts its own page views, without cookies and without any outside tool. For each page view, it records only the page name, the language and the name of the website you came from (for example “Google”); on arrival, the kind of device (phone, tablet or computer, from the browser) and the country deduced from the language set in the browser (never from the IP address); and a few clicks (to the beta, sending a beta code or a message, trial, purchase, video started). Everything is grouped into daily totals kept for 400 days. No IP address or identifier is kept with these totals; a fingerprint of the IP address is used for at most one hour to limit abuse. Nothing is counted if your browser asks not to be tracked. This measurement, used only for the website's statistics, does not require your consent (CNIL guidance on audience measurement).
- Videos: they are hosted on YouTube. Nothing is requested from YouTube until you click on a video; when you click, it loads from youtube-nocookie.com (YouTube's privacy-enhanced mode), which then applies its own privacy rules.
- Technical logs: like any host, OVH records connections to the server (IP address, page requested, date) for the security and proper operation of the website.
- Beta code: when a code is entered, the website records the date of the download, the number of the code used and the name of the person it was given to, and notifies Kotelys by email (contact@kotelys.fr). To limit random attempts, a fingerprint of the IP address is kept for at most one hour after a rejected code.
- Contact form and emails: your name, your email address, your company if you give it, your country if you give it, and your message arrive in the contact@kotelys.fr mailbox. They are used only to reply to you and to run the beta, and are kept for as long as that exchange requires. The website keeps no copy of the message; to limit abuse, a fingerprint of the IP address is kept for at most one hour.
In the Kotelys software
- Your projects stay with you: drawings, take-offs and reports are saved on your computer, never sent anywhere else.
- New versions and beta duration: Kotelys queries the GitHub service to find out whether a new version exists. For the beta duration, it reads today's date first from kotelys.fr (signed time) and, if kotelys.fr does not answer, from GitHub. No project data is transmitted; GitHub and the host of kotelys.fr see the IP address of the connection.
- Report count: when you prepare a report (“Report” button or unexpected error), Kotelys only tells kotelys.fr its version number, its build stamp and where the report came from, with no identifier and no content: this is used to spot a faulty version. The report itself is only sent by the email you send. Nothing is sent if “Check at startup” is unticked (Preferences, Updates).
- Version signal, during the beta only: at most once a day, Kotelys sends kotelys.fr a randomly drawn installation identifier (it says nothing about you), the version number, the build stamp, the interface language and the Windows version. Nothing else: no name, no email address, no file name, no project. Why: to know which version each installation uses and whether updates arrive. The IP address is not kept with this data (only an unreadable fingerprint is used, for one hour at most, to limit abusive sending). Retention: during the beta, then at most 3 months after it ends; an installation silent for 3 months is deleted. Untick “Check at startup” (Preferences, Updates): nothing is sent any more.
- Report a problem: the “Report” button prepares an archive (technical log and, if you choose, a copy of the project). Nothing is sent without your action: you send the email yourself.
Subscription, payment and licences
When you try or buy Kotelys, two providers process data on behalf of Kotelys (processors within the meaning of the GDPR).
- Stripe (payments and invoices): company name, billing address, email address, VAT number if you give it, payment method (card number or IBAN), invoices and payment history. This data is entered on Stripe's pages (checkout.stripe.com, billing.stripe.com, invoice.stripe.com): Kotelys never sees your card number or your full IBAN. Stripe also uses some of this data for its own purposes (security, fraud prevention), under its privacy policy (stripe.com/privacy).
- Keygen (licences): your licence key, its end date, the technical identifiers of your subscription at Stripe and, for each activated computer, a computed fingerprint (not the Windows identifier itself) and the computer name, which lets you recognise your computers. Keygen receives neither your name, nor your address, nor your projects; it sees the IP address of the connection at the time of the checks.
- Free trial: the website keeps a computed fingerprint of your email address and of your computer, so that the trial cannot be repeated. The address itself is kept during the trial only, to send you the key, warn you three days before the end and keep the same key if you buy; it is deleted on purchase, or seven days after the end of the trial. The language of the Kotelys interface is sent with the trial request and kept with the fingerprint of your address, only so that we can write to you in your language (trial emails, then subscription emails).
- “My keys” page: to sign in, a one-time code is sent to you by email; the website keeps only a fingerprint of it, for at most ten minutes, and a fingerprint of the IP address, for at most one hour, to limit abuse. A strictly necessary session cookie keeps you signed in for at most thirty minutes.
- Why: to perform the subscription (collect payment, invoice, issue and check licences); to meet our accounting obligations (invoices); and, for the trial fingerprint, our legitimate interest in preventing a free trial from being repeated.
- How long: invoices and accounting records, ten years (legal obligation); account and licence data, for the duration of the subscription then three years; trial fingerprints, three years.
- Outside the European Union: Stripe and Keygen may process this data in the United States. Stripe, Inc. states that it participates in the EU-US Data Privacy Framework and also relies on the European Commission's standard contractual clauses; Keygen hosts its servers in the United States and relies on those standard contractual clauses.
Prospecting businesses
Kotelys emails construction businesses (masonry, structural works, project management) to introduce the software. This prospecting is addressed to professionals about their trade; it relies on Kotelys's legitimate interest in making its software known, within the framework of article L.34-5 of the French Postal and Electronic Communications Code and the recommendations of the CNIL.
- Where the data comes from: information published by the businesses themselves (website, contact page, company LinkedIn page) and the public SIRENE business register of INSEE, the French statistics institute (name, SIREN number, address, activity). Only generic email addresses published by the business (contact@, quotes@…) are used, never an address in a person's name found elsewhere.
- What is kept: the business's name and SIREN number, its town, its activity, the published address, the dates of the messages sent (a first message and, without a reply, a single follow-up) and what followed (reply, refusal, address in error).
- How long: three years after the last contact, then deletion.
- To stop being contacted: simply reply “STOP” to one of our messages, or write to contact@kotelys.fr. Your address is then kept only so that we never write to you again.
Your rights
You can request access to, rectification or erasure of the data concerning you by writing to contact@kotelys.fr. Invoices cannot be erased before the end of their legal retention period. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
Last updated: November 12, 2026.