Privacy policy

Who publishes Brieki

Brieki is published and operated by:

Who is responsible for your data

A studio uses Brieki to track the projects of its clients. For the data of these clients (contacts, projects, tasks, comments, attachments, time spent), the studio is the data controller: it decides what it records and why. Ready Player Web processes this data on its behalf, as a processor.

Ready Player Web is the data controller for the accounts of studio teams and for studio requests.

The data processed

Depending on how you use Brieki, we process:

• your account: name, email address, password (stored in a form that does not allow it to be recovered) and, if you use it, two-factor authentication;
• the content of projects: tasks, requests, comments and attachments, with their author and date;
• the time spent on tasks, with the person who entered it;
• the log of sensitive actions (sign-ins, password or permission changes, for example), with their date and the IP address of the device used;
• studio requests: name of the studio, name and email address of the person who makes the request.

Why, and on what basis

Each processing has a specific purpose and relies on a legal basis provided by the General Data Protection Regulation (GDPR):

Account, content of projects and time spent

Run the service: sign you in, track projects, exchange with the team and send you the follow-up emails. Legal basis: performance of the contract.

Log of sensitive actions

Protect the accounts and the service, and trace the origin of an incident. Legal basis: the legitimate interest of Ready Player Web and of the studios in securing the service.

Studio requests

Review the request and create the studio. Legal basis: pre-contractual measures taken at your request.

Who receives your data

Your data is neither sold nor used for advertising. It is entrusted only to the providers the service needs:

• OVH, for hosting the tool and the data, in France;
• Brevo, for sending emails, in France;
• Google, only if you sign in with your Google account: your email address and the identifier of this account.

Services connected by a team

A member of a studio team can connect a third-party service to their projects, through the Brieki API or a connector. This service then accesses the data of the projects it has been authorized for.

Such a connection is made under the responsibility of the studio. To find out which services it uses, contact the studio.

Retention periods

Each piece of data is kept as long as necessary, then deleted:

• the data of a studio (its team, its clients, their projects and everything they contain): as long as the studio uses Brieki, until its deletion;
• the data of a client of the studio (its contacts and its projects): until their deletion, at the request of the studio;
• the sign-in kept on a device: 7 days at most after signing in;
• the links received by email, which work only once: 7 days to activate an account, one hour to choose a new password, one hour to confirm a new address, 15 minutes to sign in;
• the log of sensitive actions: one year;
• the record of follow-up emails sent (recipient and date), which avoids sending them twice: 90 days;
• studio requests: without a decision, a request expires after 30 days. A rejected or expired request is deleted 12 months after its rejection or expiry. An approved request is kept with no time limit;
• Brieki is backed up every day, and each backup is kept for 30 days. Deleted data may therefore remain for up to 30 days in a backup.

Automatic deletions take place at least once a month: data may remain up to one month longer than the period stated.

Cookies

Brieki sets only the cookies it needs to work:

PHPSESSID

Keeps your session open while you use Brieki and protects forms against submissions from another site. Duration: until the browser is closed.

REMEMBERME

Keeps you signed in on this device, so that you are not asked to sign in at every visit. It is removed when you sign out. Duration: 7 days after signing in.

Brieki sets no audience measurement or advertising cookie: no consent banner is therefore needed.

Your rights

You can ask to access your data, to correct it, to erase it, to restrict its processing or to receive it in a reusable format (portability). You can also object to its processing.

For the data of a project, first contact the studio that tracks it: it is responsible for it.

For your account, a studio request or any other question, write to confidentialite@brieki.com.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority: www.cnil.fr.