Privacy Policy
Last updated : September 5, 2026
Data controller
This policy describes how Gourmee processes the personal data of users of the platform available at app.gourmee.fr. The data controller is NEOBIZ, a limited liability company with a sole shareholder with share capital of €85,000, registered with the Grenoble Trade and Companies Register under number 525 402 103, whose registered office is at 14 B Traverse du Chalet, 38450 Vif (France). For any question regarding the protection of your data, you can contact the data protection contact at privacy@summiteo.com.
Data collected
We collect the data you provide when creating your account and using the service: sign-in identity, email address, organisation and project information. We also collect technical usage data (access logs, browsing and performance data). Authentication is delegated to an identity provider and payments to a payment provider, which processes the necessary banking data — Gourmee does not store your bank details.
Purposes of processing
Data is processed to provide and administer the service (account creation, access to SEO, GEO and site generation features), handle billing and support, improve the platform and ensure its security. [To be completed — any additional purposes related to prospecting or audience analytics.]
Legal basis
Processing is based on the performance of the service contract, on our legitimate interest in securing and improving the platform, on compliance with our legal obligations and, where applicable, on your consent (in particular for non-essential cookies). [To be completed — clarification of legal bases per purpose after legal review.]
Recipients and sub-processors
Your data is accessible to authorised Gourmee teams and to our technical sub-processors: application hosting (Railway), network and CDN (Cloudflare), authentication provider, payment provider and artificial intelligence model providers. These providers act only on instruction and within the scope of the service. [To be completed — named list and location of sub-processors, framework for transfers outside the European Union.]
Retention period
Account data is retained for the duration of the contractual relationship, then archived or deleted in accordance with applicable legal obligations. Technical logs are kept for a limited period for security purposes. [To be completed — precise retention periods per data category.]
Your rights
In accordance with applicable regulations (in particular the GDPR), you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to set directives regarding its fate after your death. To exercise these rights, contact us at privacy@summiteo.com. You may also lodge a complaint with the competent supervisory authority (in France, the CNIL).
Cookies and contact
The platform uses cookies strictly necessary for its operation (session, security) and, where applicable, audience measurement cookies subject to your consent. For any question about this policy or your personal data, please write to us at privacy@summiteo.com. [To be completed — detailed cookie policy.]