Data policy
Last updated: 14 September 2026
This notice describes how Veilio SAS processes personal data when you use Veilio Exposure, in particular if you provide a professional email to receive the report. It is issued under the GDPR and the French Data Protection Act.
1. Controller
The controller is Veilio SAS, 2 Bis Quai Jean Moulin, 69270 Couzon-au-Mont-d’Or, France, SIREN 104 545 843, VAT FR69 104 545 843. Contact: support@veilio.xyz.
2. Data processed
If you fill in the optional professional email: that address, the scanned domain (the company concerned), the scan mode, language, and, where the public SIRENE directory allows, the company name. Filling in the email is optional. The report is always available for download on the results page without an email. Scan results are based on public signals; we do not ask you to upload a customer file. Independently of the email, we process a connection identifier (IP) in memory for a short window, solely to limit abuse of the scan (rate limiting). That identifier is not stored in the lead database.
3. Purposes and legal bases
Sending the PDF report you asked for: processing necessary to take steps at your request (GDPR Art. 6(1)(b)). Storing the email together with the company/domain to handle that request, avoid duplicate sends, and follow up as a professional B2B contact about Veilio Exposure / Veilio: legitimate interests (Art. 6(1)(f)), limited to a relevant business conversation, with a right to object at any time. We do not sell this data and we do not use it for unrelated consumer advertising.
4. Recipients and transfers
Data is processed by Veilio SAS. Email delivery uses Resend (sub-processor). Resend may process data in the United States. Such transfers are covered by appropriate safeguards (including Standard Contractual Clauses). Hosting and the database are operated on our infrastructure / hosting providers acting as processors on our documented instructions.
5. Retention
The email–company record is kept for up to three years from the last relevant contact (CNIL reference period for B2B prospecting), unless you request erasure sooner or a longer legal obligation applies. Emails that are sent are retained in the mail provider’s logs for the time needed to operate and secure the service.
6. Your rights
You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests, including B2B follow-up. Write to support@veilio.xyz, specifying the email and domain concerned. You may lodge a complaint with the CNIL (cnil.fr).
7. Security
Access to the lead database is restricted. We do not publish emails in scan results or application logs. A missing email never blocks access to the on-screen report.
8. Cookies and audience measurement
The service does not use advertising cookies or cross-site tracking. In production, a cookieless audience measurement (Vercel Analytics) may run to understand traffic to the tool. It is not used to build an advertising profile. Browser storage may keep the last scan result locally on your device so you can view and download the report; it is not sent back to us as a marketing identifier.
Questions: support@veilio.xyz