Privacy

Placeholder for a France-first launch. Have a solicitor review it before anyone outside your own testing uses the service. It is not a completed CNIL filing.

Who this describes

BonCompteur is aimed at people in France and at non-residents who hold a French energy contract. The legal framing to finish before launch is EU GDPR, including the French Data Protection Act, with the CNIL as supervisor. If an account is set to the United Kingdom, UK GDPR would also need to be covered. This copy of the product defaults to France.

What is stored

Email address, supplier name, country, the monthly payment you enter, and figures extracted from bills and meter photos: dates, kWh, indexes, prices, a masked account reference (last four characters), and the drafts you approve. Raw uploads are deleted after 13 months. The database row of extracted figures can remain until you delete the account.

Why

To show you the bills and readings, to prepare a supplier email you approve, and to run the subscription if you turn billing on. The model provider, if you set a key, receives the document in order to extract figures. Draft wording is not written by the model. Choose a provider setting that does not train on your documents.

Processors you would name

Vercel for hosting, a Postgres host for production data, Resend for email, Stripe for payments, and the LLM provider if configured. Plausible receives cookieless page counts only when a domain is set. Local testing uses a SQLite file and an outbox on disk.

Expert review

Unusual results can be held for an internal review desk before they are shown. Checked by people with insurance, legal and finance backgrounds. The desk does not message you, and the public site does not name the reviewers. The stored row keeps the result, the decision, and the time. It does not add a reviewer's name to your pages.

A gifted plan and a family helper

An adult child can pay for the Utility MOT or Premium Home on a parent's French home. The parent's email receives a short invite. The plan is marked on the parent's account after they accept it. Alerts and monthly reports are also sent to the buyer only if the parent ticks a consent box. That box is empty until they tick it. The stored consent names the helper's email, the wording they agreed, the version, and the time. Withdrawing consent in Settings stops those copies. The helper does not approve emails to the supplier, and their own login does not open the parent's home. The legal basis for that sharing is the parent's consent. This paragraph is not a completed CNIL filing.

Feedback and counts

After a result you can mark whether it was useful and, optionally, leave a comment. A separate note can record a sum that was later claimed, or a payment that changed. Thirty days after the first result, BonCompteur can email a link for that note. It does not ask the supplier. Suggestions typed in the app stay on the account. Page counts can go to Plausible, which does not use cookies, and only when a domain is configured. The same event names are stored with the account so the weekly figures work without that tool. There is no cookie banner. The download includes your votes, suggestions, savings notes and event names. It does not include anyone else's.

Your actions

Settings includes a download of the stored data and a delete control for the customer file and uploaded files on this copy. Access and correction requests, and any CNIL complaint route, belong in the reviewed notice.