Privacy policy

1. Controller

Raygister is operated by QUOTIA, a simplified joint-stock company (SAS) with a share capital of 139,680 euros, registered with the Lille Métropole Trade and Companies Register (Registre du commerce et des sociétés, RCS) under number 102 497 377, 165 avenue de Bretagne, 59000 Lille, France.

Data protection officer: Sylvain Garin, who can be reached at contact@raygister.com or by post at the address above.

This policy covers the website raygister.com, the platform app.raygister.com, the e-mails sent by Raygister and the business relationship with its customers and prospects. Depending on the processing, QUOTIA acts:

• as controller, when it decides itself why and how the data is processed: website, accounts and authentication, licence, billing and Commission, security, support, business relationship and prospecting, improvement of the service;
• as processor, when it hosts, organizes, structures, analyses or makes available the content that users upload to a project, a consultation or a works contract (documents, specifications, offers, comments, exchanges, company documents), including in an organization library (article 11). The organization or professional user who determines the purposes and essential means of this processing is its controller, and Raygister acts on its instructions, under the data processing agreement.

For this content, this policy informs you of how the platform processes it; to exercise your rights, see article 9.

2. Data processed

Website visitors. Browsing data measured in aggregate and, if you accept it, detailed audience measurement data (see the cookie policy). If you join the waiting list or contact us: last name, first name, e-mail, telephone, profession, and how you heard about Raygister.

Visitors of a public organization page. If you write to an organization from its page: your name, your e-mail and your message. If you report a problem on a page: the reason, your message, the address of the page and, if you give it, your e-mail. In both cases, a fingerprint of your IP address (never the address itself) and the browser type are recorded to prevent abuse.

Users with an account.

• Identity and contact details: last name, first name, e-mail, telephone, profile picture. If you sign in with Google, Raygister receives your Google name, e-mail and profile picture.
• Organization: company name, SIRET number, VAT number, address, website, logo, contact details, role of each member.
• Administrative documents of a company, which it uploads or shares in a consultation: Kbis extract, URSSAF and tax compliance certificates, insurance certificates, qualifications, bank details, list of foreign employees.
• Preferences: language, number and date format.
• Origin of the account: the campaign (UTM parameters), the site you came from and the raygister.com page you started from, carried by the sign-up link, without a cookie; your optional answer to "How did you hear about us?"; the interface language at sign-up; the colleague who invited you; for an organization created by answering a consultation, the organization that consulted it.
• Content: projects, work packages, specifications, uploaded documents and their extracted text, prices, offers, comments, exchanges, presentations.
• Works contracts: award, amounts, signatory parties, declared signature date, signed documents, amendments.
• Conversations with the assistant and voice dictation: messages are kept in your history; a dictation recording is sent for transcription and then not kept.
• Billing: billing e-mail and address, subscription history; for a company that wins a Works Contract, amount of the Commission and the related invoices and payments. Card details are entered on Stripe's page and are never received by Raygister.
• Authorizations: the record of the agreements given by an administrator of the organization (organization library, public page), with their author, their date and the version of the text accepted.
• History and logs: history of actions and of the successive versions of projects (who changed what and when), who belongs to the project; technical and security logs (timestamps, browser and device type), including the IP address to limit abusive attempts.
• Usage: feature usage statistics, without the content of your documents; and, if you accept it, audience measurement and session recording linked to your account.

Organizations that publish a public page. If an administrator publishes the organization's page on raygister.com: name, logo, types of activity, SIRET number, website, city and department (département), and what they add to it (tagline, presentation, cover image, past projects and their photos). For a sole trader, the trade name and the SIRET number are personal data. The page never shows the organization's full address, e-mail or telephone, the names of its members, or its projects, consultations or prices.

Companies answering without an account. E-mail, company name and SIRET number, address, content of the offer and of the exchanges, single-use verification code.

Invited persons. E-mail and tracking of the invitation: the Consultant sees whether the invitation was opened, when and how many times.

Persons mentioned in projects. Users may upload documents that mention third parties (project owner (maître d'ouvrage), other parties involved, a company's employees, site address). The User who uploads them makes sure they are entitled to do so and informs the persons concerned.

Customers and prospects. Contact details, organization, position, e-mails exchanged with the Raygister team and their summary, notes, and account activity indicators (account created, active, inactive, subscribed, unpaid, feedback given), used to follow up the relationship.

Feedback. The text of the feedback you send from the platform, with your name, e-mail, organization and the page concerned.

Exchanges with Raygister. Your requests for information and support, your complaints and your requests to exercise your rights, and the answers given.

3. Purposes and legal bases

You may object at any time to processing based on legitimate interest, in particular to prospecting.

4. Recipients

Other users, under the rules of the Terms of Use: the Consultant sees the profiles and offers of the companies they consult; a consulted company only sees what concerns it and never the other companies; the project owner sees what the Consultant shares with them. A presentation shared by link is visible to anyone who has the link, until it expires (thirty days by default) or is revoked; the companies' contact details do not appear in it.

Anyone on the internet, for an organization's public page: it is available without an account, appears in the list of organizations on raygister.com and may be indexed by search engines. After it is withdrawn, a search engine may keep a copy for some time.

The administrators of an organization, for the messages you send it from its public page, with your name and e-mail so that they can reply to you.

The Raygister team, only as needed for its tasks. An authorized member may access an account to assist its holder or to ensure security; every access is logged.

The following processors, who act only on Raygister's instructions:

For the content that Raygister processes as processor (article 1), these providers are its sub-processors within the meaning of the data processing agreement.

Authorized authorities, on a request based on the law, and, where needed to defend Raygister's rights, its advisers and the competent courts.

Raygister does not sell your data.

5. Hosting and transfers outside the European Union

The platform's data (database and documents) is hosted in the European Union, in Ireland.

Some processors, in particular the providers of the artificial intelligence models, may process data outside the European Union. The transfer is then covered by an adequacy decision (in particular the EU-U.S. Data Privacy Framework for certified companies, and the decision concerning the United Kingdom) or by the standard contractual clauses of the European Commission. You can obtain a copy at contact@raygister.com.

6. Retention periods

Deleting your account. You can delete your account from your settings; if you own an organization, transfer or delete it first. Your profile is then anonymized and your conversations with the assistant are deleted. Your contributions to shared projects (comments, offers, documents) remain available to the other participants, without your name, for as long as the project exists.

7. Artificial intelligence

The artificial intelligence features help users structure, analyse and compare the information of a project. In particular, they allow:

• reading uploaded documents, including plans, photos and quotes, and extracting their content;
• structuring a project into work packages and items, and drafting specifications;
• matching the lines of an offer with the items of the project and identifying options, variants and added services;
• comparing the offers of the consulted companies and flagging gaps and points to clarify;
• spotting duplicates, omissions or inconsistent quantities;
• answering the questions put to the assistant and transcribing voice dictation.

These features help with analysis and decision-making. They do not replace the checks, expertise or trade-offs of users, who verify their results.

They send to the providers listed in article 4, through Vercel's gateway, only the content needed for the requested result. Under their contractual terms, these providers do not use this content to train their models, and neither does Raygister.

No decision producing legal effects concerning you is based solely on automated processing: the proposals of the artificial intelligence are always subject to a user's validation.

8. Security

Raygister protects your data with appropriate technical and organizational measures: encryption of exchanges, separation of data between organizations and between consulted companies, access control, logging, and team access limited to authorized persons.

9. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent at any time and to give instructions on what happens to your data after your death.

An administrator can withdraw their organization's public page at any time from the settings: it disappears from raygister.com immediately.

To exercise them, write to contact@raygister.com or to QUOTIA, 165 avenue de Bretagne, 59000 Lille, France. Raygister replies within one month and may ask you to prove your identity if in doubt.

For the content that Raygister processes as processor (article 1), preferably address your request to the organization concerned. If you address it to Raygister, it is forwarded to that organization.

If you consider that your rights are not respected, you may lodge a complaint with the French data protection authority (Commission nationale de l'informatique et des libertés, CNIL), www.cnil.fr.

10. Cookies

The use of cookies and browser storage is described in the cookie policy.

11. Organization library

An organization may upload to its library the documents it already owns (priced bills of quantities (DPGF), technical specifications (CCTP), quotes, price lists, catalogues). Raygister keeps and indexes them for the sole purpose of adapting the assistant to that organization's practices. As for the other content of its projects, the organization is the controller and Raygister acts as a processor, under the data processing agreement; the activation of the library by an administrator of the organization constitutes a documented instruction, of which Raygister keeps a record.

• These documents are never shown to another organization or to the consulted companies, and are not used to train an artificial intelligence model.
• They are not added to any shared dataset without a separate, optional agreement that is off by default.
• Their processing involves the processors Supabase, Anthropic and OpenAI (through Vercel's gateway).
• They are kept as long as the organization keeps them; a deleted document is permanently erased after thirty (30) days, and deleting the organization deletes its library.
• The organization may withdraw its instruction at any time: no document is then imported or processed any more.

If data about you appears in a document uploaded by an organization, address your request to that organization; when one of its administrators deletes the document, it is permanently erased.

12. Changes to this policy

Raygister may change this policy. Any substantial change is brought to the attention of users with an account before it comes into force. Earlier versions are provided on request at contact@raygister.com.