Privacy policy
This English version is a courtesy translation. In case of any discrepancy, the French version prevails.
This page describes the data we collect on blissa.ai, what we do with it and the rights you have. The data controller is HelloSpot, a single-shareholder SAS (SASU) with variable capital and a share capital of €30,000, 90 B rue de Fougères, 35700 Rennes, France (adresse e-mail protégée). HelloSpot has not appointed a data protection officer; this address is your point of contact.
Last updated: October 2, 2026.
The data we collect, and why
- Looking up your business. The name and city you enter are used to find your Google Business Profile and then, where applicable, your public Instagram and Facebook pages, and to generate your website proposal. Legal basis: taking the pre-contractual steps you request.
- Account creation. Your email address, needed to log back in to your website and to send you information about its creation. Legal basis: performance of the contract.
- Audience measurement. Only with your consent (cookie banner), we measure traffic to the website with Google Analytics 4, which does not store IP addresses, and visits from one of our websites to another with our own measurement tool. Legal basis: your consent.
- Abuse protection. On the home page and the creation page, Google’s reCAPTCHA service analyzes technical information about your browser and your interaction with the page to tell a person from a bot. Legal basis: our legitimate interest in protecting the service against automated use.
What we do not do with it
Your data is neither transferred nor sold to third parties. It is not used for any targeted advertising. We do not use it to promote any salon other than yours.
Who has access to it
The data is processed by HelloSpot and by the technical providers strictly necessary for the website to work, acting as processors:
- Clever Cloud SAS (Nantes, France): hosting of the website and the application.
- BunnyWay d.o.o. (Ljubljana, Slovenia): delivery of the website (content delivery network).
- HubSpot, Inc. (data hosted in the European Union, eu1 region): receipt of the messages sent through the contact form.
- Google Ireland Limited (Dublin, Ireland): audience measurement (Google Analytics 4) and abuse protection (reCAPTCHA). These services may involve a transfer of data to the United States, governed by the EU-U.S. Data Privacy Framework and the European Commission’s standard contractual clauses.
- The public interfaces of Google (Business Profile) and Meta (Instagram and Facebook pages) are queried to find information about your business that is already public.
Retention period
- Website drafts created without an account are deleted automatically after 30 days of inactivity.
- Data linked to an account is kept as long as the account is active, then deleted within 3 months of its closure, unless a longer retention period is required by law (invoices: 10 years).
- Audience measurement data is kept for 14 months by Google Analytics 4.
Your rights
Under the GDPR, you have the right to access, correct, erase, restrict, port and object to the processing of your personal data, as well as the right to withdraw your consent at any time. To exercise these rights, write to us through the contact form. You can also file a complaint with France’s data protection authority, the CNIL (cnil.fr, in French), if you believe your rights are not being respected.
Cookies and local storage
The only non-essential cookies are the audience measurement ones: Google Analytics 4, and the
cross-site journey cookie (_os_cid), set by our own measurement tool. The latter
records that you moved from one of our websites (Blissa, RDV360, HelloSpot) to another, so we
know where website creations come from; it holds a random identifier, is never shared with
third parties and expires after 13 months. These cookies are
set only after you agree through the banner shown on your first visit. Your choice, accepted or
refused, is stored in your browser’s local storage for the blissa.ai website. To change it,
clear the site data for blissa.ai in your browser: the banner will appear again on your next
visit. The reCAPTCHA service may set its own technical cookie on the pages where it runs.