Your data
What we do with your data
Your data stays in Europe, with no tracker. ConvoisOnline runs on our own servers in France, on open source building blocks, and the database is hosted in Paris. This page says what we collect, where it lives, who receives it — and what we never do with it.
Your data stays in Europe, with no tracker
ConvoisOnline runs on our own servers in France, on open source building blocks. The database is hosted in Paris. No advertising cookie, no audience measurement, no resale. Our only providers are French; our only external sources are the French State's public data.
No tracker
No advertising cookie, no third-party audience measurement, no social network button, no font loaded from a third party. A single technical session cookie, exempt from consent: there is nothing to accept and nothing to refuse.
On our servers, in France
The routing engine, the database of engineering structures, the API and the backups run on our own machines, in France. Backups are never copied to a third party.
Database in Paris, in the European Union
The database and authentication are hosted in Paris. No transfer outside the European Union is made, by design.
French providers, public sources
E-mail through Sweego, card payment through SystemPay (Lyra Network): two French providers — and we never see your bank card. Addresses, municipalities and companies come from the French State's public services.
Your position is computed on the device
Navigation tracking and structure alerts are computed on your phone. Off the planned route, your position is sent to refresh nearby alerts, and is not retained there.
Built on open source building blocks
MapLibre, Valhalla, PostGIS, OpenStreetMap, Next.js, Fastify: the stack rests on free software that anyone can inspect.
What we collect, and why
Your position
During navigation, tracking and structure alerts are computed on your device. Off the planned route, your instantaneous position is sent to our servers to refresh nearby alerts, and is not retained there. “My position” at departure is handled like a manually entered address, and is kept only if you save the route.
Your account
E-mail address, name, language, and — for a business account — your organisation's company name and SIREN. Purpose: identifying you, performing the contract and invoicing. Card payment is handled by SystemPay: we never have access to the card number.
Your routes
The routes you save, their waypoints and the chosen network category, so we can give them back to you and let you reuse and share them. How long they are kept depends on your plan; a share can be revoked at any time.
Where your data is
The routing engine, the database of engineering structures, the API and the backups run on our own servers, in France. Backups stay on our infrastructure: they are never copied to a third party. The database and authentication are hosted in Paris, in the European Union. Technical logs, which contain only the IP address and the timestamp of requests, are kept for ninety (90) days at most.
What we never do
- No advertising tracker, no third-party audience measurement, no social network button, no font loaded from a third party.
- No advertising, in the application or on this site.
- No resale, no rental, no exchange of your data — nor of your e-mail address.
- No transfer outside the European Union, by design, within the processing we operate.
The external services we use
We would rather name them. Four are public services of the French State, two are French providers, one hosts the database in Paris, and the last is an optional map background that you choose to display or not.
- Base Adresse Nationale (api-adresse.data.gouv.fr) — a public service of the French State. Receives the address you type, relayed by our server, to turn it into coordinates.
- geo.api.gouv.fr — a public service of the French State. Receives the coordinates of a point placed on the map, relayed by our server, to return the name of the municipality.
- recherche-entreprises.api.gouv.fr — the official company register. Receives the company name you search for, and your IP address.
- IGN — Géoplateforme (data.geopf.fr) — a public service of the French State, and the default provider of the map background and the aerial imagery. Your device requests the tiles for the displayed area directly from it: it receives those coordinates and your IP address, with no account and no token from us.
- Sweego — a French provider. Sends our e-mails: receives your e-mail address and the content of the message.
- SystemPay, operated by Lyra Network — a French provider. Handles card payment: it is the only one to receive your card number, and we never have access to it.
- Supabase — hosts the database and authentication, in Paris, in the European Union. The hosting is European; the company behind the service, however, is American, and we would rather write it down.
- OpenFreeMap (tiles.openfreemap.org) — an optional map background, a non-profit project hosted outside France. If you pick it in the “Map background” selector, your device requests the tiles directly from it: it receives the coordinates of the displayed area and your IP address, with no account and no token. The IGN backgrounds on offer stay served by the public service.
The open source building blocks of the stack
MapLibre (maps), Valhalla (route computation), PostgreSQL and PostGIS (geographic data), OpenStreetMap (community map data), Next.js and React (interfaces), Fastify (API), Proxmox (virtualisation), Gitea (code repository). We do not claim that ConvoisOnline is entirely free software for all that: our e-mail, payment and database hosting providers publish proprietary services.
Your rights
Access, rectification, erasure, restriction, objection, portability: you can exercise your rights at any time by writing to us, and you may lodge a complaint with the CNIL. The detail of the processing, the retention periods and the legal bases is set out in our privacy policy.
For any question about your data: privacy@bdr-systemes.com
Prepare your next convoy with the official data
The Discovery plan remains free, no credit card required: 2 free route builds to try ConvoisOnline before subscribing.
Your data stays in Europe, with no tracker. How we handle your data