Privacy Policy — IZItopo

1. Purpose

This policy describes how personal data is processed in the IZItopo mobile application and its associated services: the project synchronisation server, the licence server and the web viewer.

IZItopo is professional surveying software intended for land surveyors, engineering consultancies and construction companies. It is not intended for consumer use, nor for minors.

2. Who decides what

The application is used in one of two modes, and TCract's role differs in each.

In standalone mode, the application runs without a user account. It reads a licence issued to a company. TCract then processes no personal data about the user, other than a technical device identifier used to enforce the licence.

In connected mode, accounts are created, administered and deleted by the client company, which alone determines how they are used. TCract hosts this data on that company's behalf, as a processor within the meaning of Article 28 of the GDPR. The controller is the client company: rights relating to accounts, projects and measurements are exercised with them.

TCract acts as controller for matters arising from its own commercial relationship: licence management, invoicing, support and the security of its services.

3. Data processed

User account (connected mode)

First name, last name, email address, role, associated company, and a password stored as a hash. Purpose: authentication and access control. Legal basis: performance of the contract entered into with the client company.

TCract does not collect users' phone numbers.

Licence and device

Licence key, technical device identifier, device make, model and operating system version, and session timestamps. Purposes: activating features, technical support, and preventing unauthorised concurrent use. Legal basis: performance of the contract and the publisher's legitimate interest.

This device identifier is technical. It is not linked to any advertising identifier and is not used for any profiling.

Measurements and projects

Coordinates of surveyed points and their technical metadata (accuracy, positioning quality, position source, measuring device, timestamp), site photographs and their capture coordinates, names, feature codes and annotations. This data is produced by the professional user and belongs to their company.

Location

The application accesses precise location for survey measurement and to position photographs and site reports.

The application does not hold the Android background location permission and never tracks your movements.

Map backgrounds

Displaying the map downloads tiles from third-party providers. Each request sends them your IP address, the client's technical identifier and the coordinates of the area being viewed. These providers receive neither your GNSS position, nor your measurements, nor your photographs.

Technical logs

Our servers record the IP address, timestamp and requested address of every request, for security and diagnostic purposes.

4. What the application does not do

• No advertising, no advertising trackers, no advertising identifiers
• No audience measurement, no telemetry, no automatic crash reporting
• No sale or transfer of data to third parties
• No profiling, no automated decision-making
• No in-app payments
• No data passed on to TCract's resellers

The tcract.fr website

These commitments concern the IZItopo application and its associated services. The tcract.fr website, on which you are reading this page, does use audience measurement (Google Analytics, with the IP address anonymised). It is loaded only after you explicitly accept it, through the banner shown on your first visit: if you decline, no measurement script is loaded at all. Your choice is stored in your browser; to change it, clear the site data saved for tcract.fr.

This audience measurement concerns website browsing only. It has no access to the application, to your measurements, to your projects or to your account.

5. Hosting and recipients

Your practice may add its own map backgrounds. The corresponding imagery is then loaded directly from the provider it has chosen, which receives your IP address and the area being viewed. The choice of that provider, and of its location, rests with your practice.

The transfer to Esri (United States) is governed by the European Commission's standard contractual clauses. The United Kingdom benefits from an adequacy decision.

6. Retention periods

On your device

• Your sites, measurements, photographs and drawings are kept for as long as you do not delete them. No automatic mechanism erases them.
• Temporary synchronisation files, created to transmit a measurement or a photograph, are deleted 7 days after their transmission is confirmed. The originals are never touched.
• Export archives are deleted when the next export runs, and no sooner than 24 hours after they were created.
• Demonstration mode data is generated and erased each time you enter and leave that mode.

On our servers

• Projects, measurements and photographs: kept for the entire duration of the contract with your company. Their deletion is that company’s decision.
• Previous versions of replaced files: 30 days.
• Licence service logs and audit logs: 6 months.
• Server technical logs: kept until the log files rotate, with no fixed period.
• Backups: kept for up to 6 months, encrypted. Deleted data may remain in a backup until that backup expires.

7. Business accounts and deletion

IZItopo accounts are business accounts. They are created, administered and deleted by your company from its administration portal, in the same way as a work email address. The application allows neither the creation nor the deletion of an account.

To have your account deleted, contact your company's administrator. If that is not possible, or for any request concerning your rights, see our dedicated page: Account deletion.

What is deleted: the account, the name, the email address, the login tokens, and the links to projects and groups.

What is kept: the measurements, photographs and annotations produced remain the property of the company, as its professional deliverables. The link to the user's identity is severed permanently and irreversibly: this data becomes anonymous.

Deleting an account does not terminate the licence, which belongs to the company.

Requests are handled within 30 days. Some data may be kept longer where the law requires it, in particular for accounting and tax purposes.

8. Security

• All communications are encrypted (TLS); unencrypted traffic is refused
• Tokens and identity data are encrypted at rest on the device
• Data is partitioned by client company
• Files are accessed through short-lived signed links
• Backups are encrypted
• Automatic cloud backup and device-to-device transfer are disabled

9. Your rights

Under Regulation (EU) 2016/679 and French Act No. 78-17 of 6 January 1978 as amended, you have the right of access, rectification, erasure, restriction of processing, objection and data portability.

These rights are exercised by writing to info@tcract.fr, or by post to TCract's registered office. We reply within one month.

If your request concerns an account, a project or measurements, please contact your company's controller first.

You may lodge a complaint with the CNIL, the French data protection authority, at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.

10. Permissions requested by the application

The application does not request the background location permission.

Any permission may be declined: declining limits the corresponding feature without preventing use of the rest of the application.

11. Changes

Any substantial change is announced on this page. The version date appears at the top of this document.