Privacy Policy

Last updated: April 2026. This page exists in English and French. In case of any divergence between the two versions, the French version prevails.

1. Information We Collect

We collect information that you provide directly to us when using our services. This includes:

Account information: name, email address, company name, and job title when you register for an account or request early access.
Usage data: information about how you interact with our platform, including features used, pages visited, and actions taken.
Communications: any messages, feedback, or support requests you send to us.
Technical data: IP address, browser type, operating system, device information, and general location data collected automatically when you access our services.

2. How We Use Your Information

We use the information we collect for the following purposes:

To provide, maintain, and improve our Purchase Continuous Monitoring platform.
To process your registration and manage your account.
To communicate with you about our services, updates, and promotional materials (with your consent).
To analyze usage patterns and optimize the user experience.
To detect, prevent, and address technical issues and security threats.
To comply with legal obligations and enforce our terms of service.

Legal basis: we rely on performance of a contract or pre-contractual steps at your request for account creation and early access; on your consent for the newsletter and other marketing messages, which you may withdraw at any time; on our legitimate interest in running and securing the service for usage analysis, fraud prevention and answering business enquiries; and on legal obligation where the law requires us to retain or disclose data.

3. Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

With service providers who assist us in operating our platform (hosting, analytics, email delivery), under strict data processing agreements.
When required by law, regulation, or legal process.
To protect the rights, property, or safety of BlueSourcing, our users, or the public.
In connection with a merger, acquisition, or sale of assets, with prior notice to affected users.

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. Specifically:

Account data is retained for the duration of your active account and for up to 12 months following account closure.
Usage data is retained in aggregated, anonymized form for analytics purposes.
Communication records are retained for up to 24 months.
You may request deletion of your data at any time by contacting us.

5. Your Rights Under GDPR

As a data subject under the General Data Protection Regulation (GDPR), you have the following rights:

Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may request correction of inaccurate or incomplete data.
Right to erasure: You may request deletion of your personal data under certain conditions.
Right to restrict processing: You may request that we limit how we use your data.
Right to data portability: You may request your data in a structured, machine-readable format.
Right to object: You may object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, write to contact@bluesourcing.io. We will respond within one month. You also have the right to lodge a complaint with a supervisory authority. In France this is the CNIL, 3 place de Fontenoy, 75007 Paris, cnil.fr. You may also complain to the authority of the country where you live or work.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, and regular security assessments.

7. International Data Transfers

Our hosting is located in the European Union. Our transactional email provider, which delivers the messages generated by the forms on this site, operates from the United States, so form submissions involve a transfer outside the EEA.

That transfer is covered by the European Commission Standard Contractual Clauses, together with the additional safeguards set out in the data processing agreement we hold with that provider. You may request a copy of the relevant clauses at contact@bluesourcing.io.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: contact@bluesourcing.io

BlueSourcing is a product of SHARETEAL, a French simplified joint-stock company (SASU), which acts as the data controller for the purposes of this policy. Full company details, including registered office and registration number, are set out in our Legal Notice.