Privacy Policy

Last updated: 18 October 2026

1. Data controller

Adrien Montfaucon EI, an individual business (entreprise individuelle) registered in Paris, France ("we", "us"), is the controller of personal data processed by Havre (the "App"). Contact: LinkedIn.

2. Who can use the App

The App is offered to a limited number of users who have explicitly opted in by signing in with a third-party account provider and approving the requested permissions. We do not process data of anyone who has not opted in.

3. Data we access and why

Depending on the account provider you choose (for example Google), the App receives the following data, strictly through the permissions ("scopes") you approve on the provider's consent screen:

Data	Purpose
Profile information (account identifier, name, profile picture) and email address	Identify you and authenticate your session
Emails (messages, attachments and metadata such as sender, recipients, subject and date) – optional, only if you grant this access	Email archival: copying your messages into an archive that you control
Files (documents stored in your account, their content and metadata such as name and modification date) – optional, only if you grant this access	Storage backup: copying your files into a backup that you control

Profile information and email address are used for sign-in. Access to your emails and files is optional and separate: it relies on the productivity suite of your account provider and is requested only for the archival and backup features, and only if you approve it on the provider's consent screen. If you decline, you can still sign in but those features are unavailable.

We request only the permissions strictly necessary for these features and do not access any other data from your account. Emails and files are accessed only to perform the archival or backup you request.

4. Legal basis (GDPR Art. 6)

Consent (Art. 6(1)(a)) for accessing your account provider data: you grant it through the provider's consent screen and may withdraw it at any time (see section 9).
Contract / legitimate interest (Art. 6(1)(b)/(f)) for minimal technical logs needed to run and secure the App.

5. How we use and store data

Data obtained from your account provider is used only to provide the features of the App that you requested.
Data is hosted in Germany (European Union), encrypted in transit (TLS) and at rest. Access tokens are stored encrypted and only as long as needed.
We do not sell your data, use it for advertising or profiling, or use it to train generalized AI/ML models. No human reads your account data, except where necessary for security, to comply with law, or with your explicit consent.

6. Sharing and transfers

We do not share your data with third parties, other than our hosting provider, [HOSTING PROVIDER NAME], acting as a processor under a data processing agreement, or where required by law. Your data is stored and processed within the European Union and is not transferred outside the European Economic Area. Note that the account provider you sign in with processes your data under its own privacy policy.

7. Retention and your control

Retention of archived emails and backed-up files is under your control: they are kept until you delete them or ask us to, and you can revoke the App's access at any time, which stops all further collection. Within [30] days after you revoke access or request deletion, we delete your archived data and tokens, and backups are purged within [30] days thereafter. Minimal technical logs are kept for up to [30] days.

8. Automated decisions

The App does not make decisions producing legal or similarly significant effects based solely on automated processing.

9. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port and object to processing, and to withdraw consent at any time without affecting prior lawful processing. To exercise them, or to request deletion of your data, contact us via LinkedIn; we respond within one month. You can also revoke the App's access at any time from your account provider's security settings (for Google: myaccount.google.com/permissions). You may lodge a complaint with the French supervisory authority, the CNIL, or the authority of your country of residence.

10. Provider-specific disclosures

Google. Havre's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Equivalent commitments apply to any other account provider supported by the App, in accordance with that provider's developer policies.

11. Cookies

This website uses no tracking or advertising cookies. [The App uses only a strictly necessary session cookie, if applicable.]

12. Security and breaches

We apply appropriate technical and organisational measures (encryption, access control, least privilege). In case of a personal data breach we will notify the CNIL and affected users as required by the GDPR.

13. Children

The App is not intended for persons under 16.

14. Changes

We will update this page for material changes and, where required, notify users and seek renewed consent.