Privacy

Privacy policy

This document describes the data collected by the copaysolution.com website — the presentation website. It does not describe the payment service itself, which is subject to separate processing described in the merchant contract.

Version of September 12, 2026

This English version is provided for convenience. In case of discrepancy, the French version prevails.

1. Who is the data controller

COPAY SAS, a société par actions simplifiée (simplified joint-stock company) with its registered office at 2 rue de Vouillé, 75015 Paris, France, operator of the copaysolution.com website.

Contact for any question about personal data: contact@copaysolution.com.

2. What this website collects, and why

The website has no user accounts, no shopping cart and no sign-up form. Only four types of processing apply to it.

2.0 In-house audience measurement (cookieless)

To find out how many people visit the website, through which channel they arrive (advertising, search engine, social network, direct link) and which pages lead them to book a meeting, the website sends to its own server the page viewed, the referring website (domain name only), the campaign parameters present in the URL, the screen size and the country inferred from the IP address.

  • No cookie is set. The arrival channel is kept in the tab's storage, which is cleared when the tab is closed.
  • Nothing is kept per visitor: only daily counters are recorded (for example “12 visits from an ad on September 13”). The IP address is not stored; it is used only, on the same day, to estimate a number of unique visitors in a form that does not allow it to be recovered.
  • No third parties: these statistics are neither shared nor cross-referenced with other data. They are hosted by Vercel Inc. and Upstash Inc.
  • Legal basis: our legitimate interest in measuring traffic to the website (Article 6(1)(f) GDPR). This measurement meets the conditions for exemption from consent set by the CNIL.
  • Retention period: 13 months.

You can object to it at any time: stop measuring my visits on this browser.

2.1 Advertising campaign measurement (Meta pixel)

If, and only if, you have consented to it through the banner provided for this purpose, the website loads the Meta pixel, a tracker provided by Meta Platforms Ireland Limited. It shows which ads bring visits and meeting bookings, so that those that bring none can be stopped.

  • Data concerned: IP address, browser identifier set by Meta (_fbp cookies, and _fbc if you arrive from an ad), pages viewed on this website, measured actions (demo started, meeting booked).
  • Legal basis: your consent, Article 6(1)(a) GDPR. It is obtained before anything is set and can be withdrawn at any time.
  • Recipient: Meta Platforms Ireland Limited, acting as joint controller for this measurement.
  • Transfer outside the European Union: yes, to the United States, governed by the EU–U.S. Data Privacy Framework, to which Meta has signed up.
  • Retention period: the cookies set by Meta last a maximum of 13 months; your consent choice is stored in your browser for the same period.

If you decline, nothing is loaded or sent: the pixel is not merely “disabled” — its file is not downloaded, no cookie is set, and no server-side transmission (described below) takes place.

2.1 bis Transmission from our server (Conversions API)

Again subject to the same consent, the same events are sent to Meta a second time from our server rather than from your browser. This redundancy exists because some browsers block the pixel: without it, the measurement would be highly incomplete.

  • Data concerned: the same as above — Meta measurement identifiers (_fbp, _fbc), IP address, browser, page viewed and name of the action. No additional personal data: no name, email address or phone number, which this website does not collect.
  • No double counting: each event carries a unique identifier shared between the two transmissions, which Meta uses to keep only one of them.
  • Legal basis, recipient, retention period and transfer: identical to the previous paragraph.

You can change your mind at any time: change my cookie preferences.

2.2 Meeting booking (Calendly)

Meeting booking is provided by Calendly LLC, whose calendar is displayed on the home page or in a window opened by the “Book a meeting” buttons. The information you enter to book a slot — name, email address, any message — is processed by Calendly and passed on to us to arrange the meeting.

  • Legal basis: taking steps at your request prior to entering into a contract, Article 6(1)(b) GDPR.
  • Retention period: the duration of the business relationship, then three years from the last contact.
  • Transfer outside the European Union: yes, to the United States, governed contractually by Calendly.

2.3 Hosting and technical logs

The website is hosted by Vercel Inc. Like any web server, it records technical logs containing, in particular, the IP address, the date and the page requested. They are used solely for the security and proper operation of the service, on the basis of our legitimate interest (Article 6(1)(f) GDPR), and are kept for a limited period by the hosting provider.

2.4 Fonts

The website's fonts are loaded from Google Fonts, which sends your IP address to Google LLC when the page is displayed. No cookie is set in the process. We plan to host these fonts ourselves in order to eliminate this transmission.

3. What the website does not do

  • No selling, renting or exchanging of data with third parties.
  • No profiling for the purpose of automated decision-making.
  • No collection of payment data on this website: there is nothing to pay for on it.
  • No trackers other than those described above.

4. Your rights

You have the right of access, rectification, erasure, restriction, objection and portability regarding data concerning you, as well as the right to withdraw your consent at any time. These rights can be exercised by writing to contact@copaysolution.com; you will receive a reply within one month.

For data processed by the Meta pixel, you can also act directly from the ad settings of your Meta account.

If you are not satisfied with the reply, you can lodge a complaint with the competent supervisory authority — in France, the Commission nationale de l'informatique et des libertés (CNIL), www.cnil.fr.

5. Changes

Any change to this policy is published on this page with a new version date. If a new measurement tool were to be added, your consent would be asked for again — it would not be inferred from your previous consent.