Data Controller

Seer SAS is the data controller responsible for your personal data. We are a company registered in France and subject to the General Data Protection Regulation (GDPR).

Data We Collect

Legal Basis for Processing

We process your personal data under the following legal bases as defined by GDPR Article 6:

• - Performance of contract (Art. 6(1)(b)) — To provide the SeerDesk platform and fulfil our service agreement with your organization
• - Pre-contractual steps (Art. 6(1)(b)) — To answer requests sent through the contact form
• - Legitimate interest (Art. 6(1)(f)) — To secure the platform, prevent abuse, keep the audit log, and measure session quality and fix crashes
• - Legal obligation (Art. 6(1)(c)) — To issue invoices and keep them for 10 years

How We Use Your Data

We use the data we collect strictly for the purposes described below. We do not sell, rent, or share your personal data with advertisers or data brokers.

• - Authenticate users and machines on the platform
• - Enforce role-based access control and permissions
• - Maintain audit trails for security and compliance
• - Process contact form inquiries and respond to support requests
• - Send transactional emails (invitations, invoices, warnings before an inactive account is deleted)
• - Measure session quality and fix crashes
• - Monitor platform health and detect security incidents
• - Rate-limit API requests to prevent abuse

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected.

• - Login sessions: 24 hours
• - Accounts: for the duration of the contract. An account inactive for 12 months is deleted after two email warnings
• - Audit log: 12 months
• - Quality telemetry: 6 to 13 months depending on the level of detail
• - Crash reports: 12 months, with log excerpts kept 90 days
• - Technical logs (web servers, monitoring): 30 days at most
• - Sent emails: 30 days after sending
• - Contact form submissions: 12 months
• - Invoices: 10 years (legal obligation)
• - Organizations, machines and invitations: for the duration of the contract, then deleted within 90 days, backups included

International Data Transfers

Personal data is hosted in the European Union, by OVH, in France and Germany. Our processors are established in France. We do not transfer our customers' personal data outside the EU or EEA.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, write to contact@seerdesk.com. We reply within one month. You can also object to quality telemetry directly in the app's Settings.

Security Measures

We implement technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

• - Hashed passwords (bcrypt): we never store plaintext passwords
• - Machine authentication using Ed25519 public-key cryptography
• - End-to-end encrypted remote desktop sessions (DTLS/SRTP via WebRTC)
• - Session content never passes through our servers and is never recorded
• - Rate limiting (200 requests per minute per IP) to prevent brute-force attacks
• - Session tokens with automatic 24-hour expiry
• - Authorization checked on every request
• - Private mesh network between internal services
• - Audit log of changes and sessions, kept for 12 months

Cookies

This website sets no cookies. The app keeps your login token and your preferences in your browser, strictly as needed for it to work. For details, see our Cookie Policy.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the date at the top of this page. We encourage you to review this policy periodically.

Questions About Your Privacy?

If you have any questions about this privacy policy or how we handle your data, contact us:

Email: contact@seerdesk.com

Address: 3 Rue du Pre du Bois, 35000 Rennes, France

You also have the right to lodge a complaint with your local data protection authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertes).