Privacy policy

I-SOFT processes personal data in two distinct situations subject to different rules. On this website and in the commercial relationship, I-SOFT is controller and determines purposes and means; this policy describes that processing. In the software, for data entered or caused to be entered by your company, your company is controller and I-SOFT is processor under article 28 GDPR, acting only on your instructions and for contractual purposes. Corresponding commitments appear in the terms.

Personal data is information concerning an identified or identifiable natural person, directly or indirectly, including a name, identification number, location data or online identifier.

Depending on your interaction: identity data including name, email, postal address, telephone and role; company details including legal name, vehicle count, activity, email, telephone and company registration number (SIREN/SIRET in France); subscription and billing details, order contents and date, and commercial correspondence. Banking details are handled by the payment provider and do not pass through our servers. Browsing data may include IP address, browser, operating system, language and visited pages within the Cookies section's limits.

Software data is what your operation requires: trips, passengers, ordering customers, drivers, vehicles and commercial documents. You define its contents.

Directly when you complete a contact, quotation or demonstration form, open a trial account or write to us. Indirectly through browsing within the Cookies section's limits. You must ensure information you provide is accurate and complete and update it where needed.

To answer and follow up requests, manage subscriptions, supply the subscribed service and meet legal obligations, particularly accounting and tax. Depending on the case, the basis is contractual or precontractual performance, our legitimate interest in developing the business, or a legal obligation.

With consent where required, data may also be used to send software news and developments. Consent may be withdrawn at any time through the unsubscribe link in each message. No decision having legal effects for you is made solely through automated processing.

I-SOFT processes your data. It is neither sold, rented nor transferred for commercial purposes. Technical providers operate for specific purposes under security and confidentiality duties: Vercel for the public website; Amazon Web Services for the application and its backups in Paris; Anthropic models through Amazon Bedrock for the assistant; iopole for electronic invoicing; an SMS delivery operator; and a payment provider for debits and billing.

Software data is never used to train or improve an AI model. Where legally required, data may be sent to authorised bodies, including judicial and administrative authorities.

The public website is hosted by Vercel. The Logipax application and its backups are hosted by Amazon Web Services in its Paris region, France. The French hosting location stated for the application does not automatically extend to website processing. For the application, should future processing involve a transfer outside the European Union, specific notice and appropriate safeguards under the regulation will be provided.

We take appropriate precautions to preserve security and confidentiality and prevent data being distorted, damaged, disclosed or accessed by unauthorised parties. Connections are encrypted, passwords never stored in plain text, access restricted to authorised people and sensitive actions logged. Backups are daily. For a breach likely to risk your rights, we notify the CNIL within regulatory deadlines and inform you when the risk is high.

Driver-app geolocation is optional, based on consent withdrawable at any time without affecting app access. If accepted, positions are collected only during a service session and collection ends at the end of that session. Positions are deleted after 30 days. The employer enabling the function remains responsible for information and consultation required under employment law.

Contact, quotation and demonstration enquiries: three years from the last exchange. Unconverted trial accounts: twelve months from creation. Operating data: subscription duration plus 90 days before deletion. Driver positions: 30 days. Accounting documents and invoices: ten years under the French source's legal scope. Electronic-invoicing documents: the legally applicable period. Technical logs: twelve months.

Beyond these periods, data is deleted or archived where needed to establish a right or comply with a legal obligation.

You have rights of access, correction and deletion, objection and restriction, and portability where applicable. Consent may be withdrawn at any time; prior processing remains valid. You may give general or specific instructions concerning data after your death.

To exercise rights, write to Contact form. A response is supplied within one month. If rights are not respected, a complaint may be made to the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or to the data protection authority of your country of residence. Drivers, passengers or ordering customers of a client business should address that business, which is controller; we assist it in responding.

On your first arrival at the home page, the website uses the language indicated by your browser's Accept-Language header and the approximate country code supplied by Vercel from your IP address to choose the language and regional variant. This detection does not apply to explicit localised URLs, which are respected. The country is used only to choose the display and is not stored in your browser. The feature does not request GPS access or browser location permission and adds no IP geolocation provider or IP address log. If the country is missing, unknown or outside the supported countries, the reference variant is displayed.

On the public logipax.io domain, Google Analytics 4 measures page visits and clicks to the free trial only with your permission. No Google measurement script or request loads before acceptance or after rejection. Google advertising and personalisation features are disabled. Fonts remain hosted on our own servers.

Rejecting is as easy as accepting. The Cookie settings link at the bottom of each page lets you change your choice or withdraw consent; withdrawal stops measurement and removes Google Analytics cookies accessible to the site. Your choice is stored locally under logipax-audience-consent-v1 for six months. After acceptance, _ga and _ga_* cookies last at most 180 days without automatic renewal on each visit.

Google receives technical browsing data, including the IP address used to connect, cookie identifiers, visited pages and measured interactions. The site removes URL parameters and does not transmit form fields. Google Ireland Limited provides this service, which may involve processing outside the European Union under Google's stated safeguards: https://policies.google.com/privacy. This is separate from the software data hosted in France. Rejection does not restrict access to the site.

The functional logipax-locale cookie stores your manual language preference for one year. The session cookie logipax-language-visited prevents automatic language detection from running again during the same session. These cookies have no advertising purpose. The application uses authentication session cookies deleted on logout or session expiry. You can block or delete cookies in your browser; blocking necessary cookies prevents application access.

Changes are published on this page with their date; please consult it regularly. A clause found invalid or contrary to regulation is deemed unwritten without invalidating the other clauses.

Forms use Cloudflare Turnstile to distinguish human visitors from automated submissions. This protection is necessary for the form and is independent of your audience-measurement choice. Cloudflare processes the verification token and technical browser and connection information; our server does not send the fields of your enquiry to Cloudflare. The token is verified on the server before delivery, expires after five minutes and can be used only once. Provider information: https://www.cloudflare.com/privacypolicy/.

Contact details and messages submitted on this website are sent to FormSubmit for forwarding to us by email. FormSubmit states that it retains submissions for 30 days. The French hosting of the Logipax application does not cover this form delivery service.