What Comevaa collects, and what it does with it.

COMEVAA (Comevaa) is responsible for the processing described on this page, for this website and for its platforms. You can write to quentin@comevaa.fr with any question, and you will get an answer.

When Comevaa runs a client's campaigns, it acts on the client's instructions and on its behalf. The client remains responsible for the data of its own prospects, which Comevaa processes for it as part of the work it entrusts to Comevaa.

Comevaa measures this website's audience with PostHog, hosted in the European Union. As long as you have not accepted anything, this measurement works without any cookie and without any identifier stored on your device: it sees which pages are viewed, it does not track people.

Advertising cookies are used only to measure Comevaa's own campaigns. They are set only after you accept them in the banner, and you can refuse them without losing anything on the site.

The diagnostic form sends Comevaa your name, your email address, your website address, the budget you indicate and the context you write. This information goes to its HubSpot CRM, its only destination, and is used to call you back and prepare the conversation.

Comevaa adds the origin of your visit when it is known, that is, the campaign parameters present in the address you arrived from. This tells it which campaigns bring in requests.

When you enter a website address to get a review of it, Comevaa reads the public pages of that site and keeps the result for seven days, so that a second request for the same domain does not start the work again.

Your IP address is used only to limit the number of reviews per visitor and per day. It is never stored as is: only a fingerprint of it is kept, computed with the current date, which makes it possible to identify the same person during the day and impossible to follow them beyond it.

Comevaa's clients give it access to their ad accounts, including their Meta, Google Ads and TikTok accounts, and to their CRM. This access is granted by the client itself through each platform's own consent screen, it is limited to the accounts the client designates, and it can be withdrawn at any time.

Comevaa reads their performance: campaigns, ad groups, ads, spend, impressions, clicks and conversions. It stores it in its platform to display the client's dashboards, compute its cost per step and match it with the contacts in its CRM. When the client asks it to, Comevaa also creates and updates its campaigns; new campaigns are always created paused, and every launch, budget change or status change is approved by its director, Quentin Valentini.

Comevaa reads neither payment methods nor the customer lists the advertiser has uploaded to the ad platform. It collects no personal data about the people who see the ads. From a CRM's contacts it keeps only an identifier, a date and a campaign origin, with no name, no email address and no phone number: the question it answers is how many contacts come from which campaign, never who they are.

Access tokens are encrypted at rest and tied to a single client. When a client withdraws Comevaa's access from the ad platform, its imports stop.

Some clients collect their requests with a form Comevaa hosts for them. A prospect's answers, their name, email address, phone number and what they answered, then pass through its platform to be delivered to the client's CRM. Comevaa acts on behalf of the client, who remains responsible for this data.

These answers are kept encrypted until they are delivered to the CRM, then erased from the platform. An answer that could not be delivered is erased after thirty days at most. What remains of a delivered lead, its date, its campaign of origin and a fingerprint of the email address that cannot be reversed, is erased thirty days after delivery.

When the client's CRM is HubSpot, the client itself installs the Pilot by Comevaa app and chooses its permissions. It can remove this access at any time from HubSpot, in the settings, under Connected apps. The installation guide (in French) details what the app reads and writes.

Comevaa's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data obtained through these APIs is used only to provide and improve the features visible to the client who gave consent. Comevaa does not sell it, does not transfer it to anyone for advertising purposes, and does not use it to train general-purpose artificial intelligence models. No human reads it, except with the client's consent, to solve a technical problem, or when the law requires it.

You can withdraw Comevaa's access at any time from your Google account permissions. The withdrawal takes effect immediately and its imports stop.

Comevaa relies on service providers to host the website and the platforms (Vercel), store the data (Neon), run its CRM (HubSpot), measure the audience (PostHog) and produce reviews and content proposals from a client's material (Anthropic and OpenAI). Each one accesses only what its function requires.

Comevaa sells no data and exchanges it with no one else.

Website review results are kept for seven days. Diagnostic requests remain in Comevaa's CRM for three years from the last exchange. A client's campaign data is kept for the duration of the engagement, then deleted or returned at the client's request.

You can ask for access to your data, its correction, its erasure or the restriction of its processing, and you can object to its use. Write to quentin@comevaa.fr and your request will be handled within one month.

If the answer does not satisfy you, you can lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL).

COMEVAA, a French EURL with €1,000 share capital, headquartered at 14 rue de Chabrol, 75010 Paris, France. Registered with the Paris Trade and Companies Register under number 999 417 819, SIRET 999 417 819 00011, EU VAT number FR56999417819.

Publication director: Quentin Valentini. Contact: quentin@comevaa.fr.

The website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.

The terms of use are on the terms of use page (in French).