Privacy Policy

1. Introduction

At Spectalya, we place the utmost importance on protecting your personal data. This privacy policy explains how we collect, use and protect your information when you use our service.

By using Spectalya, you accept the practices described in this policy.

2. Data Controller

The data controller is:

e-Genium srl, publisher of Spectalya
Website: www.e-genium.be
Email: [email protected]

3. Data Collected

We collect the following types of data:

The content of your inspections stays on your device. Photos, descriptions, transcriptions and PDF reports are stored locally in the app and exported to your own destinations (ZIP, FTP, S3, cloud). We keep no copy of them on our servers.

4. Use of Data

Your data is used to:

• Provide and improve our services
• Manage your account and subscription
• Ensure platform security
• Send you important communications (invoices, service updates)
• Respond to your support requests
• Comply with our legal obligations

5. Legal Basis for Processing

We process your data on the following legal bases:

• Contract performance: to provide the service you subscribed to
• Legitimate interest: to improve our services and ensure security
• Legal obligation: to comply with our accounting and tax obligations
• Consent: for sending marketing communications (which you can withdraw at any time)

6. Data Sharing

Your data may be shared with:

• Stripe: for secure payment processing
• OpenAI: for audio transcription (anonymised data)
• Hosting providers: for secure data storage
• Authorities: when required by law
• Meta and Google: solely for audience and advertising measurement on this website, and only with your consent (see the Cookies and tracking technologies section). No inspection data is shared with them.

7. Data Retention

We retain your data for the following periods:

• Account data: for the duration of your subscription + 3 years
• Inspection content: not retained by us — it stays on your device and you alone control its deletion
• Inspection references and activity history: for the duration of your subscription + 1 year after cancellation
• Audio recordings sent for transcription: not retained in normal operation. Where technical diagnostics are required, the corresponding logs are deleted within 30 days at most
• Billing data: 10 years (legal requirement)
• Connection logs: 1 year

8. Data Security

We implement appropriate security measures to protect your data:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest
• Strict access control
• Continuous system monitoring
• Regular backups
• Periodic security testing

9. Your Rights

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your data
• Right to portability: receive your data in a standard format
• Right to object: object to certain processing
• Right to restriction: restrict the processing of your data

10. Cookies and tracking technologies

On your first visit, a banner lets you accept or decline non-essential cookies. No advertising or analytics tracker is set before you make that choice. You can change or withdraw your consent at any time through the Manage cookies link at the bottom of every page.

We use three categories of cookies. Necessary cookies keep the site working: session, display language and your cookie choices. They cannot be disabled. Audience measurement cookies (Google Analytics) tell us which pages are viewed. Advertising cookies (Meta) measure how our ads perform on Facebook and Instagram.

Meta Pixel and Conversions API. If you accept the advertising category, we send Meta Platforms Ireland Limited events about your visit (viewing a page, proceeding to payment, starting a free trial). These events are sent both from your browser (Meta Pixel) and from our server (Conversions API), and are deduplicated by Meta. They carry technical identifiers (IP address, browser, ad click identifiers) and, when you sign up, your first name, last name and email address in hashed form (SHA-256), which Meta therefore cannot read in clear text.

For these operations, Meta Platforms Ireland Limited and ourselves act as joint controllers within the meaning of Article 26 GDPR. Meta then processes this data on its own behalf, in line with its privacy policy.

Legal basis. Your consent, under Article 6(1)(a) GDPR. Withdrawing your consent stops any further collection, without affecting the lawfulness of processing already carried out.

Transfers outside the European Union. Meta and Google may transfer data to the United States. Those transfers rely on the EU–US Data Privacy Framework and, additionally, on the European Commission's standard contractual clauses.

What we never send. The content of your inspections — photos, audio recordings, transcriptions, reports, your clients' details — stays on your device and never leaves the app for advertising purposes. It is never sent to Meta, Google or any other advertising party. This section covers only your browsing of the www.spectalya.com website.

11. Changes

We may update this privacy policy. Significant changes will be notified to you by email or in-app notification.

12. Contact

For any questions regarding this policy or your personal data:

Email: [email protected]

You also have the right to lodge a complaint with your country's data protection authority.