CAPEXIA
  • Solution
  • Who it's for
  • How it works
  • Integrations
  • Use Cases
  • Blog
  • |
  • Request a demo
  • Solution
  • How it works
  • Who it's for
  • Integrations
  • Use Cases
  • Blog
Home › Privacy Policy
Data protection

Privacy Policy

Last updated: July 1, 2025 — GDPR compliant

Data Controller

RFC DIGITAL— 11, Rue Gabes, Centre Ville Rabat.
DPO contact: contact@capexia.app

Data Collected

We collect only data strictly necessary for our services:

  • Demo request form: first name, last name, professional email, phone, company, role, company size, annual CAPEX budget (optional)
  • Lead capture popin: first name, last name, professional email, role
  • Contact form: first name, last name, professional email, phone, company, role

Purposes and Legal Basis

  • Demo processing: execution of pre-contractual measures (Art. 6.1.b GDPR)
  • Commercial follow-up: legitimate interest (Art. 6.1.f GDPR)
  • Analytics: legitimate interest — anonymized GA4, no advertising profiling

Data Retention

  • Prospect data: 24 months from last interaction
  • Client data: duration of contract + 5 years (legal obligation)
  • Navigation logs: 13 months (CNIL recommendation)

Data Recipients

Your data is never sold. It may be shared with:

  • CAPEXIA team: sales, support, management
  • Technical subprocessors: Scaleway (hosting), Google (Analytics), Brevo (emails) — all GDPR-compliant and EU-based

Your Rights

In accordance with the GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Delete your data ("right to be forgotten")
  • Port your data in structured format
  • Object to processing based on legitimate interest
  • Restrict processing

To exercise your rights: dpo@capexia.app
You may also lodge a complaint with the CNIL (cnil.fr) or the CNDP (cndp.ma)

Cookies

This site uses only:

  • Technical cookies (session, CSRF, language preference): exempt from consent
  • Google Analytics 4: anonymized mode, no advertising data transfer

No advertising cookies, social media trackers, or retargeting are used.

Data Security

  • HTTPS/TLS encryption on all exchanges
  • Hosting in France (Scaleway DC Paris)
  • Sensitive field encryption (Fernet AES-128)
  • IP hashing before storage (SHA-256)
  • Automated daily backups

Policy Updates

This policy may be updated. The effective date is indicated at the top of the page. We recommend checking this page periodically.

CAPEXIA

© 2026 CAPEXIA — CAPEX management and investment governance software

Legal notice Privacy policy Contact

Request a demo

45 minutes to see CAPEXIA applied to your context with a finance and management control expert consultant.

Contact us

45 minutes to see CAPEXIA applied to your context with a consultant.