Privacy policy
Last updated: 27 September 2026
This policy sets out what personal data Merconto processes, why, with which providers, for how long, and how to exercise your rights. It covers the merconto.com site, the app.merconto.com application and our e-mail exchanges.
This English version is provided for convenience: the French version prevails. A question: contact@merconto.com.
1. Who is responsible
Merconto is published by ENOC, a French simplified joint-stock company (SAS) with a share capital of €800, registered with the Caen Trade and Companies Register under number 942 171 323, whose registered office is at 19 bis rue du Clos des Roses, 14920 Mathieu, France, trading as ENOC Distribution ("ENOC", "we"). ENOC is the controller of the processing described here. Contact: contact@merconto.com, +33 7 67 16 21 68.
For the content you save in your workspace (section 3), ENOC acts as a processor for the customer company, which remains its controller: article 18 of the terms of service sets the rules.
2. Data, purposes, legal bases
| Data | Purpose | Legal basis |
|---|---|---|
| Site visits. The host's technical logs: IP address, page requested, date and time. | Serve the pages, protect the site. | Legitimate interest. |
Site analytics. Page viewed, referring page, campaign parameters in the address (for example utm_source), approximate country and region, operating system, browser, device type (section 9). | Know which pages are read, as aggregated statistics. | Legitimate interest. |
| Enterprise form. Name, company, job title, business e-mail, phone (optional), team size, number of suppliers, price lists received per month, message. | Answer your request. | Steps taken at your request before entering into a contract. |
| Account. Name, e-mail address, company name (the workspace name), password hash, role in the workspace, sign-up and sign-in dates, invited members (address, role, who invited them). | Create your account and workspace, sign you in, manage the team, provide the service. | Performance of the contract. |
| Sign-in security. Verification codes and sign-in links sent by e-mail, session tokens, confirmed browsers (all stored as hashes), IP address while limiting attempts. | Verify your address, authenticate, block repeated attempts. | Performance of the contract and legitimate interest (security of the service). |
Trial follow-up. The site page the sign-up came from, the source of the visit (the utm_source or ref parameter of the address), usage counters of the workspace. | Support your trial, know which pages bring customers. | Legitimate interest. |
| Billing. Name or company name, billing address, VAT number, e-mail address, Stripe customer and subscription identifiers, plan, subscription status and history (section 5). | Collect the subscription, issue invoices, apply VAT. | Performance of the contract; legal accounting and tax obligations. |
| Exchanges. Messages sent from the Help screen (with your name, address, workspace and role), e-mails exchanged with us. | Answer you, fix and improve the service. | Performance of the contract; legitimate interest. |
| WhatsApp, if you link your number. Linked phone number, link and unlink dates; messages, files and photos sent to Merconto's number, and its replies; technical identifiers of the messages received. | Link your number to your account, read what you send, reply to you, save what you confirm. | Performance of the contract. |
No advertising tracker is used, on the site or in the application.
3. The content of your workspace
What you upload or enter in the application is Customer Data: the lines read from your price lists (reference, description, brand, colour, barcode, price, currency, restrictions, and the line as read), the file name, the supplier name (optional) and the offer date, customer requests (product, quantity, requester's name, note), orders, conversations with the agent, public prices entered by hand and your settings. This content may include personal data, for example the name of a contact.
Files. An uploaded file is written to a temporary file while it is read, then erased: it is neither stored nor logged. Only the lines read from it are kept.
Pasted text. A supplier offer, customer message or purchase order you paste is read by the model (section 4). Requests read from a customer message are saved straight away; an offer or an order is saved only once you confirm it. The pasted text itself is not kept.
WhatsApp messages. If you link your number, what you send to Merconto's WhatsApp number is read like pasted text or an attachment (section 4). Nothing enters your workspace without your YES reply; until then, what was read and the text received wait twenty-four hours at most, then their content is erased. Merconto does not keep the files and photos it receives: only the lines read enter your workspace, when you save them. Questions asked over WhatsApp form an agent conversation, visible in the application.
Isolation. Each workspace sees only its own data. Only public prices collected on Google Shopping are pooled across workspaces: they are public prices, saved with no link to the workspace that triggered the collection. A public price entered by hand stays with the workspace that entered it.
What the Merconto team sees. The trial and subscription tracking screens, restricted to team addresses set in the service's configuration, show for each workspace the company name, the Owner's name and address, dates and counters (uploads, lines, suppliers, conversations, AI credits used, last sign-in), never the content of price lists. When a workspace is created, the team also receives an e-mail with the company, the person's name and address, the end of the trial, the page of origin and the source of the visit; each subscription, plan change, cancellation or failed payment is reported the same way.
Nothing is erased in the application. A removed item (supplier, upload, reference, request, order, team member) leaves every screen and calculation but stays in the database, dated, and can be restored. Actual deletion happens when the workspace is closed (section 8).
Purchase-price reference. On every upload, each line with a price in euros also feeds a reference table: the product's matching key, its brand, its barcode, its original price and currency, its price converted into euros, the offer date and the date it was saved. It carries neither the workspace identifier, nor the supplier, nor the upload. It is not used yet; it is meant to establish price benchmarks per product one day. As it is linked to no workspace, it is not deleted when a workspace is closed.
4. Artificial intelligence
To read what you give it, Merconto sends the following to the API of Anthropic PBC, 548 Market Street, San Francisco, CA 94104, United States:
- the content of uploaded files (descriptions, references, prices), laid out as a text table;
- the supplier offers, customer messages and purchase orders you paste;
- the messages, files and photos you send to Merconto's WhatsApp number, and your replies to what it read (corrections, questions);
- the attachments you give the agent: a spreadsheet, laid out as a text table like an uploaded file; a PDF as it is; a photo or screenshot, downsized and re-encoded without its metadata (location, device). Merconto does not keep the file: only the rows read enter your workspace, when you save them;
- your questions to the agent, the recent history of the conversation and the results of the tools it consults in your workspace (suppliers, references, prices, requests).
The model reads and matches; no figure displayed comes from it, calculations are done by Merconto. Under the commercial terms of this API, this data is not used to train Anthropic's models. Merconto's usage log keeps, for each call, only the number of tokens and its cost, to count your AI credits.
5. Payment
The subscription is paid on a Stripe Checkout page and managed in the Stripe customer portal. Stripe collects your payment method, your billing address (required) and, if you provide it, your VAT number; Stripe Tax calculates VAT and invoices are issued by Stripe in ENOC's name. Merconto never sees your card number.
Merconto sends Stripe the Owner's e-mail address and the workspace identifier, and keeps on its side the Stripe customer and subscription identifiers, the plan, the subscription status, its renewal date and the history of its changes.
6. Providers
| Provider | Role | Data received |
|---|---|---|
| Render Services, Inc., 525 Brannan Street, Suite 300, San Francisco, CA 94107, United States | Hosts the application and its database, on servers in Frankfurt (Germany). | All application data; technical connection logs. |
| Anthropic PBC, United States | Artificial intelligence reading, agent answers. | See section 4. |
| Meta Platforms Ireland Limited (WhatsApp Business Platform), Ireland | Carries WhatsApp messages between your number and Merconto's, only for users who link their number. | Your phone number; the messages, files and photos exchanged with Merconto's number. |
| Cloudflare, Inc. (Cloudflare R2), United States | Stores the daily backup of the database, in the "European Union" jurisdiction. | A copy of the database, encrypted before it is sent (AES-256-GCM) with a key only Merconto holds: Cloudflare receives only unreadable bytes. |
| Stripe (Stripe Payments Europe, Limited, Ireland) | Payment, invoices, VAT calculation. | See section 5. |
| Google Ireland Limited (Google Workspace), Gordon House, Barrow Street, Dublin 4, Ireland | Mailbox of contact@merconto.com, from which the application's e-mails are sent (including codes, sign-in links, invitations, requested reports). | E-mail addresses and e-mail content. |
| Google LLC (Google Fonts), United States | Provides the application's typeface. | The IP address of your browser, which downloads it. |
| Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States | Hosts the site and measures its audience (section 9). Its servers may be outside the European Union. | Technical connection logs (IP address, page requested, timestamp), visit data. |
| FormSubmit (Devro LABS), United States | Relays the Enterprise form by e-mail to contact@merconto.com. | The content of the form. |
| DataForSEO | Collects public prices on Google Shopping. | Product identifiers (barcode, or brand and reference, or description), the search country and language; no purchase price, no supplier, no account data. |
7. Transfers outside the European Union
Several of these providers are established in the United States or may process data there: Anthropic, Vercel, FormSubmit and Google LLC, and depending on the case Render, Cloudflare, Stripe, Google Ireland and Meta. These transfers are covered by the European Commission's standard contractual clauses, or by the EU–US Data Privacy Framework for certified providers.
8. Retention periods
| Data | Period |
|---|---|
| Enterprise form | Twelve months after the last exchange, then deleted. |
| Account, workspace and Customer Data | As long as the workspace exists, including after the end of the trial or subscription. On request to contact@merconto.com, ENOC closes the workspace and deletes its data within thirty days, after providing an export if you wish. ENOC may close a workspace that has had no subscription and no sign-in for twenty-four months, after warning the Owner by e-mail at least thirty days in advance. |
| Codes, links and tokens | Valid for fifteen minutes (verification codes, sign-in links), thirty minutes (link to choose a new password), seven days (invitations), thirty days (sessions), six months (confirmed browsers). Only their hash is saved. Codes, links and unaccepted invitations are deleted seven days after they expire; sessions and confirmed browsers, thirty days after they end. |
| The linked number stays attached to your account as long as the workspace exists, including after it is unlinked, which is dated. What awaits your YES: twenty-four hours at most, then its content is erased. Link codes: fifteen minutes, single use. Technical identifiers of the messages received: thirty days. | |
| Sign-up whose code was never entered | It creates neither an account nor a workspace. The request (name, company, address, password hash) is deleted seven days after its code expires. |
| IP address, to limit attempts | In memory only, forgotten after an hour without a new request or when the server restarts. |
| Site analytics | The hash that recognises a visit is discarded after 24 hours; only aggregated statistics remain. |
| Hosts' technical logs | A limited period, set by the host, for security purposes. |
| Billing | Data held by Merconto follows the workspace; invoices and accounting records are kept for the period required by law. |
| Backups | An encrypted copy of the whole database leaves every day. Data deleted from the database remains in earlier backups, encrypted, until they are deleted from the backup storage. |
| Purchase-price reference | Linked to no workspace, it is not deleted when one is closed (section 3). |
10. Security
- Passwords are never stored in clear: only a scrypt hash, salted for each account, is kept.
- Session tokens, sign-in links, verification codes, invitations and confirmed browsers: only their SHA-256 hash is stored.
- E-mail address verified by a code at sign-up; a code sent by e-mail on the first sign-in from an unknown browser; attempts limited per IP address and per e-mail address.
- Encrypted HTTPS connections, with HSTS; a content security policy and no display inside a frame, on the site and in the application.
- Application hosted in Frankfurt; isolated workspaces; three roles (Owner, Member, Read-only).
- Files erased after reading; request content never logged.
- Daily backup of the database, checked then encrypted with AES-256-GCM before it leaves the server, stored in the European jurisdiction; the key stays with Merconto.
11. Your rights
You have the right to access, rectify, erase, restrict and port your data, the right to object to processing based on our legitimate interest, and the right to set instructions on what happens to your data after your death.
To exercise them, write to contact@merconto.com; we answer within one month. You can change your name and e-mail address yourself in the application (Settings, Account). Deleting an account or a workspace, and a full export of its data, are handled today on request to that address, within thirty days: the application has no button for this yet.
If you are a member of a customer company's workspace, a request about the content of that workspace is handled with that company, which is its controller.
You may also lodge a complaint with the French data protection authority (CNIL), www.cnil.fr.
12. Version of this policy
The date at the top of this page shows the version in force. See also the terms of service and the legal notice (in French).