Privacy Policy
Last updated: 19/07/2026 · Version française
This policy describes how Maintova (the "Application" or "Service") collects and processes personal data, in accordance with Regulation (EU) 2016/679 ("GDPR") and applicable data protection law.
1. Data controller
- Habib HENNI, trading as "HB Concept" — sole trader (auto-entrepreneur, France)
- 1A rue des Creuses, 70400 Frahier-et-Chatebier, France
- Contact: contact@maintova.fr
2. Two distinct roles (important)
Maintova is maintenance-management software intended for client companies.
- Maintova acts as data controller for the user accounts of its clients (administrators and technicians), licence management and billing.
- Maintova acts as data processor (Article 28 GDPR) for the data that the client company itself enters into the Application about its own customers, contacts and interventions. In that case, the client company is the data controller and Maintova acts on its instructions, under a data processing agreement (annexed to the Terms of Sale).
3. Data we collect
a) Account data (Maintova as controller)
- Identity: last name, first name, email address, phone number, profile photo.
- Company data: company name, address, contact details.
- Role and permissions (administrator, technician), account activation status.
b) Billing data
- Chosen plan, number of seats, subscription history, due dates.
- No bank card data is stored by Maintova: payments are processed by Stripe, the sole recipient of payment data.
c) Usage and technical data
- Connection logs, technical identifiers, diagnostic data, notification tokens (where applicable), anti-abuse mechanisms (App Check).
d) Content entered in the Application (Maintova as processor)
- Customer and contact records, machines, interventions, inspections, reports, photos and videos, handwritten signatures, site plans, internal tutorials. This content is the responsibility of the client company.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Provide and operate the Service | Performance of the contract |
| Manage accounts and licences | Performance of the contract |
| Billing and subscription (via Stripe) | Performance of the contract / legal obligation |
| Security, fraud and abuse prevention | Legitimate interest |
| Support and service-related communication | Performance of the contract / legitimate interest |
| Compliance with legal obligations (accounting, tax) | Legal obligation |
| Sending verification emails / service notifications | Performance of the contract |
5. Recipients and processors
Your data may be shared with our technical processors, only for the needs of the Service:
- Google Ireland Limited (Firebase / Google Cloud) — hosting, authentication, storage, notifications. Data hosted in the EU (europe-west1, Belgium).
- Stripe Payments Europe, Ltd. — payment and billing processing.
We do not sell your personal data.
6. Transfers outside the European Union
Data is hosted in the European Union. Some processors (notably Stripe and Google) may carry out processing involving transfers outside the EU; these are governed by the European Commission's Standard Contractual Clauses and/or the Data Privacy Framework, ensuring an adequate level of protection.
7. Retention periods
- User accounts: for the duration of the subscription, then deleted or anonymised within 12 months after the end of the contract.
- Billing data: kept for 10 years under accounting and tax obligations.
- Technical / security logs: 12 months.
- Business content: kept for the duration of the contract; returned/deleted at the end according to the data processing agreement.
8. Your rights
Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability.
- Exercising your rights: contact@maintova.fr.
- If the data concerning you was entered by a client company (you are one of its customers/contacts), please address your request to that company, which is the data controller; we will forward it if necessary.
- You may lodge a complaint with the French supervisory authority (CNIL, www.cnil.fr) or your local authority.
9. Security
We implement appropriate technical and organisational measures: encryption of communications (HTTPS/TLS), strict data isolation per company (multi-tenant), role-based access control, server-side security rules, anti-abuse protection (App Check), hosting in the EU.
10. Cookies and local storage
The Application does not use advertising cookies or third-party trackers. It uses strictly necessary local storage for its operation (authentication, language preferences, offline mode).
11. Changes
This policy may be updated. The applicable version is the one published at https://maintova.web.app. In case of substantial change, you will be informed.
12. Contact
For any question about your data: contact@maintova.fr.