Privacy Policy

This Privacy Policy explains how we collect, use and protect personal data when you visit adminmate.io, create an account and use Adminmate (the “Service”). It also explains the rights you have over your data.

In short: the content of your database stays on your servers and we cannot read it. We only process the data needed to run your account and the Dashboard, we do not sell personal data, and our infrastructure is hosted in the European Union.

1. Who is responsible for your data

The data controller is CROK, a SAS (simplified joint-stock company) registered with the RCS Paris 131 294 829, whose registered office is located at 14 rue Charles V, 75004 Paris, France. For any question about this policy or your personal data, contact us at [email protected].

2. The data in your database

Adminmate is made of two parts: the Dashboard, hosted by us, and the Data API, which you deploy on your own infrastructure. We do not store the content of your database, and reading it requires the master password stored on your server, which is never sent to us. We therefore have no access to the personal data your database may contain.

Some features — teams, permissions, the activity log and comments — store information about your team members and the actions they perform. For this information, our customer is the data controller and we act as a data processor on their behalf, under the data processing terms set out in our Terms & Conditions. If you are a member of a customer’s team, please contact that customer to exercise your rights.

3. The data we collect

• Account data: name, email address, password (stored hashed, never in clear text) and, if you provide them, your company and role.
• Project data: the names and configuration of your Projects, the URLs of your Data API environments, your teams, the Members you invite and their permissions.
• Activity and collaboration data: logs of the actions performed from the Dashboard (who did what, when, on which model and record) and the comments, reactions and mentions posted by Members.
• Support data: the messages you send us through the live chat or by email, and the related contact details.
• Technical data: IP address, browser and device information, and server logs, collected for security and to keep the Service running.
• Usage data: aggregated statistics on how our website and the Dashboard are used.

4. Why we use your data

We do not sell your personal data and we do not use it for automated decision-making.

5. Who receives your data

Your data is only accessible to the members of our team who need it. We also rely on carefully selected service providers (sub-processors), who process data on our behalf and according to our instructions:

We may also disclose data when required by law, or to a successor in the event of a merger, acquisition or sale of assets, in which case you will be informed.

6. International transfers

We favor providers hosting data in the European Union. When personal data is transferred outside the European Economic Area, the transfer is framed by appropriate safeguards, such as an adequacy decision of the European Commission (including the EU-U.S. Data Privacy Framework) or the Standard Contractual Clauses.

7. How long we keep your data

• Account and Project data: as long as your account is active, then deleted within 30 days after its deletion.
• Activity and collaboration data: as long as the related Project exists, unless deleted earlier by its owner.
• Support conversations: up to 3 years after our last exchange.
• Technical logs: up to 12 months.
• Inactive accounts: may be deleted after 3 years of inactivity, after notifying you by email.

Some data may be kept longer when the law requires it, for example for accounting purposes.

8. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS), hashed passwords, restricted access to production systems and regular updates. The architecture of Adminmate itself is a security measure: your database stays on your infrastructure and its content cannot be read from our servers.

9. Your rights

Under the GDPR and the French Data Protection Act, you have the right to:

• access your personal data and obtain a copy of it;
• rectify inaccurate or incomplete data;
• have your data erased;
• restrict or object to its processing, including for direct marketing at any time;
• receive your data in a portable format;
• withdraw your consent at any time, when processing is based on consent;
• give instructions on what happens to your data after your death.

To exercise these rights, contact us at [email protected]. We will answer within one month. We may ask you to prove your identity if we have reasonable doubts about it. If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL, or with the authority of your country of residence.

10. Cookies

We only use the cookies needed to keep you logged in to the Dashboard and to keep your live chat conversation. Our audience measurement is cookieless and we do not use advertising cookies. All the details are in our Cookie Policy.

11. Children

The Service is intended for professionals and is not directed at children under 16. We do not knowingly collect their personal data.

12. Changes to this policy

We may update this Privacy Policy to reflect changes to the Service or to the law. The date at the top of this page shows when it was last updated. If the changes are significant, we will notify you by email or in the Dashboard.

13. Contact

For any question about this policy or your personal data, write to us at [email protected] or by post at CROK, 14 rue Charles V, 75004 Paris, France.