Last updated: 20 March 2025 · Effective date: 20 March 2025
Pievra is committed to protecting your personal data. This Privacy Policy explains who we are, what data we collect, why we collect it, how we use it, and what rights you have. It applies to all users of pievra.com and the Pievra platform globally, with specific provisions for users in the European Union and France.
The data controller responsible for your personal data is:
As data controller, Pievra determines the purposes and means of processing your personal data in accordance with the EU General Data Protection Regulation (GDPR) (Regulation 2016/679) and the French Data Protection Act (Loi Informatique et Libertés, as amended by the Law of 20 June 2018).
| Category | Data Types | Source |
|---|---|---|
| Account Data | Name, work email address, company name, job title, password (hashed) | Provided by you on registration |
| Campaign Data | Campaign briefs, budgets, targeting parameters, flight dates, buying model selections | Provided by you via Campaign Planner |
| Agent Listing Data | Agent name, description, performance benchmarks, protocol compatibility, SDK integration logs | Provided by you on agent submission |
| Transaction Data | GMV amounts, Liquidity Fee transactions, payment method details (tokenised via payment processor) | Generated by platform use |
| Usage Data | Pages visited, features used, click events, session duration, browser type, OS, IP address | Automatically collected via GA4 and server logs |
| Community Data | Comments posted on News articles, votes, reactions | Provided by you in community features |
| Communication Data | Emails sent and received with Pievra, support ticket content | Provided by you in communications |
We do not collect special category data (sensitive personal data) as defined in Article 9 GDPR, including health data, racial or ethnic origin, political opinions, religious beliefs, or biometric data.
We process your personal data on the following lawful bases under Article 6 GDPR:
We retain personal data for as long as necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required by law.
We do not sell your personal data. We share data with the following categories of third parties:
All sub-processors are bound by data processing agreements in compliance with Article 28 GDPR. A current list of sub-processors is available on request at privacy@pievra.com.
Some of our sub-processors (including Google and Stripe) are located outside the European Economic Area (EEA). Where we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including:
For transfers to the USA, we rely on SCCs supplemented by Transfer Impact Assessments (TIAs) where required.
We use cookies and similar tracking technologies on pievra.com. You can manage your cookie preferences via our Cookie Consent Banner presented on your first visit.
You may withdraw cookie consent at any time by clicking the "Cookie Settings" link in the footer or by using your browser settings. Withdrawing consent does not affect the lawfulness of prior processing.
As a data subject under the GDPR, you have the following rights:
Request a copy of all personal data we hold about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your personal data ("right to be forgotten").
Request that we restrict processing of your personal data.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or for direct marketing.
Not to be subject to solely automated decisions with significant effects.
Withdraw consent for consent-based processing at any time.
To exercise any of these rights, please contact privacy@pievra.com. We will respond within 30 days. We may request proof of identity before processing requests. Exercising your rights is free of charge unless requests are manifestly unfounded or excessive.
You have the right to lodge a complaint with your national supervisory authority. In France, this is the CNIL (see below). In other EU member states, you may contact your local Data Protection Authority.
Pievra complies with French data protection law including the Loi Informatique et Libertés (n°78-17) as amended by the Law of 20 June 2018 implementing the GDPR into French law.
DPO Contact: Our Data Protection Officer can be contacted at dpo@pievra.com for any data protection enquiries, including those specific to French law or CNIL requirements.
The Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a minor without verified parental consent, we will delete that data promptly. If you believe we have collected data from a minor, please contact privacy@pievra.com.
Pievra implements appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, including:
We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or prominent notice on the Platform at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Services after the effective date constitutes acceptance of the updated Policy.
For any questions, requests, or complaints regarding this Privacy Policy or our data processing practices: