Privacy policy

1. Introduction

Patrimoine360, published by LUPUS SOLUTIONS (a simplified joint-stock company with share capital of EUR 1,000.00, registered office: 16 Place des Quinconces, 33000 Bordeaux, France, company number 945 012 425), takes the protection of your personal data seriously. This privacy policy explains how we collect, use and protect your information when you use our service.

2. Data we collect

We collect the following types of data:

• Identification data: surname, first name, email address
• Financial data: information about your investments (shares, cryptocurrencies, property, and so on)
• Connection data: IP address, browser type, pages visited
• Banking data: only if you use the bank connection provided by our partner Powens

3. Purposes of processing

Your data is used to:

• Create and manage your user account
• Provide the wealth tracking service
• Improve our services and your experience
• Send you notifications about your account
• Meet our legal obligations

4. Legal basis

The processing of your data rests on:

• Performance of the service contract
• Your consent for certain specific processing
• Our legitimate interest in improving our services
• Compliance with our legal obligations

5. Data security

We put technical and organisational security measures in place to protect your personal data:

• Encryption of data in transit (HTTPS/TLS)
• Password hashing (bcrypt)
• Restricted access to data
• Regular backups
• Secure hosting

6. Data retention

Your data is kept for as long as you use the service and for 3 years after your account is deleted, in line with legal obligations.

Technical data has its own retention periods, applied automatically every day:

• Audience measurement: 13 months maximum, in line with the French data protection authority’s recommendation.
• Security logs: 12 months.
• Technical error logs: 12 months (3 months once the incident is resolved).
• Login attempts: 30 days.
• Expired sessions and tokens: deleted as soon as they expire.

7. Your rights

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your data
• Right to rectification: correct your data
• Right to erasure: ask for your data to be deleted
• Right to portability: retrieve your data in a structured format
• Right to object: object to certain processing
• Right to restriction: restrict the processing of your data

To exercise these rights, contact us at privacy@patrimoine360.com

8. Cookies and audience measurement

We use three categories of trackers. Only essential trackers are set without your agreement; the other two require your explicit consent, collected through the banner shown on your first visit.

• Essential: required for the service to work (authentication, display preferences). These cannot be turned off.
• Audience measurement: traffic statistics hosted on our own servers, with no third-party tool. These measurements are anonymous: we record neither your IP address nor your account identifier. Amounts, identifiers and addresses shown on screen are stripped before recording, and the data is never passed to a third party.
• Advertising: Google AdSense, which may set advertising cookies. These load only after you consent.

You can change or withdraw your consent at any time through the “Manage cookies” link at the bottom of every page.

9. Processors

We use the following processors:

• Vercel: application hosting
• PostgreSQL: database
• Powens: bank aggregation (when enabled)

10. Contact

For any question about this privacy policy: privacy@patrimoine360.com

You may also lodge a complaint with the CNIL, the French data protection authority, if you believe your rights are not being respected.