Privacy policy

Primelis is responsible for the data described here. For any question or request about your data, write to gaultier@benly.ai.

• Your account. Your email address, your name and your profile picture. If you choose a password, it is kept by our sign-in provider, never by us.
• Sign in with Google. If you use "Continue with Google", Google sends us your name, your email address and your profile picture. We ask for nothing else and use them only to create your account and sign you in. Cross Social cannot read your Gmail, Drive, contacts or calendar.
• Your workspaces. The workspaces you create or join, their members and roles, the invitations you send (an email address and a role), your settings and rules, and a log of the actions taken in each workspace.
• Advertising data. When a workspace connects a Meta or TikTok ad account, we store the access token the platform issues, encrypted, and we read the account's campaigns, ad sets, ads, targeting settings and daily results (spend, reach, frequency and similar figures). These are totals computed by the platforms. They do not identify the people who saw the ads.
• Files you import. The daily store sales and brand search exports a workspace uploads.
• Audit requests. The email address you enter in the audit form on the website.
• Technical data. Like any website, our hosting provider records the requests it receives (IP address, browser, pages requested) to keep the service running and secure.

The app sets the cookies needed to keep you signed in. The website and the app carry no advertising cookies and no audience measurement tools.

• To run the service: sign you in, show your workspaces, compute the figures and apply the campaign changes your workspace allows.
• To answer an audit request you sent.
• To keep the service secure and working.

We do not sell your data, we do not use it for advertising and we do not use it to train AI models. Under the GDPR, we rely on the performance of the service you asked for and on our legitimate interest in keeping it secure.

The members of a workspace see each other's name, email address and picture, and the data of that workspace. The team that runs Cross Social can access the data to operate and support the service.

These providers process data for us:

• Clerk (United States): accounts and sign-in.
• Vercel (United States): hosting of the website and the app. Our server code runs in Frankfurt, Germany.
• Neon (United States): the database, hosted in Frankfurt, Germany.
• Google, only if you sign in with Google.
• Meta and TikTok, only for workspaces that connect an ad account: we call their APIs with the access you granted.

When one of these providers handles data outside the European Union, it does so under the safeguards of its data processing terms (the European Commission's standard contractual clauses).

• Your account: until you ask us to delete it. When an account is deleted, its profile and its workspace memberships are removed from our database.
• Advertising data and access tokens: until the workspace disconnects the platform. Disconnecting deletes the token and everything that was read from that platform.
• Workspaces: an archived workspace disappears from the app. Its data is erased when you ask us.
• Audit requests: while we are in touch about your request, and deleted when you ask.

You can ask for a copy of your data, have it corrected or erased, limit or object to its use, and take it elsewhere. Write to gaultier@benly.ai: we answer within one month. If you are in the European Union, you can also complain to your data protection authority (in France, the CNIL).

When this page changes, the date at the top changes with it.