Protecting your data
This Privacy Policy explains how Keryo, the social media publishing application published by Ovion, collects, uses, stores and protects your personal data.
1. Data controller
This Privacy Policy applies to the Keryo application, available at https://keryo.io. The data controller is Ovion, a French simplified joint-stock company (SAS) registered with the Paris Trade and Companies Register under number 939 522 033, located at 60 Rue François 1er, 75008 Paris, France.
Contact: support@keryo.io
2. Data collected
When you use Keryo, we collect the following data:
- Email, password, name
- LinkedIn, X (Twitter), Facebook, Instagram, Threads, TikTok, YouTube and Pinterest accounts
- Email address for waitlist users
- Browsing data for statistical purposes via PostHog
3. Collection methods
Data is collected through:
- The sign-up form
- OAuth connection with LinkedIn, X, Facebook, Instagram, Threads, TikTok, YouTube and Pinterest
- Manual addition to a waitlist
- Session cookies and, where applicable, tracking cookies via PostHog
4. Purposes of processing
Data is collected in order to:
- Enable the creation and management of a Keryo user account
- Publish posts on LinkedIn, X, Facebook, Instagram, Threads, TikTok, YouTube and Pinterest
- Provide performance statistics
- Analyse how the application is used
5. Legal basis
Data processing is based on:
- Performance of the contract (creation and management of the user account)
- Legitimate interest (improving the service)
- Consent for certain processing (in particular future third-party cookies)
6. Retention period
Data is retained:
- For as long as the Keryo account is active
- Until the account is deleted by the user
- Connections to LinkedIn, X, Facebook, Instagram, Threads, TikTok, YouTube and Pinterest remain valid until revoked by the user
7. Data access & sub-processors
Only authorised staff within Ovion have access to the data.
Data may be processed by the following services:
- Stripepayment processing (email)
- PostHogapplication usage analytics
- AWS S3image hosting
8. Transfers outside the EU
No personal data is transferred outside the European Union.
9. User rights
In accordance with the GDPR, you have the following rights:
- Right of access, rectification and erasure
- Right to restriction of processing
- Right to object
- Right to data portability
- Right to withdraw your consent at any time
You can exercise your rights by contacting us at: support@keryo.io . To delete your account and associated data, see our Data Deletion Policy at https://keryo.io/data-deletion.
10. Cookies and trackers
We use cookies to:
- Manage user sessions (login)
- Collect anonymous data via PostHog
No consent management system is in place yet. A consent banner will be implemented shortly.
11. Security
We implement appropriate technical and organisational measures:
- Encryption of authentication tokens
- No direct reading or modification of tokens is possible
- Control middleware on both the back end and the front end
12. Changes
We may amend this policy at any time. Users will be informed of any significant changes.
Questions about your data?
Our team is available to answer any question you may have about the protection of your personal data.
Contact us