Privacy

1. In short

This site sets no cookies and uses no advertising trackers, no browser fingerprinting and no third-party analytics. The calculator reads your payroll file in your browser: the publisher never receives its contents. The only personal data the publisher processes come from the contact form and, if you subscribe, what the contract and invoicing require.

2. The calculator

The file is read by your browser, in memory. It is not uploaded, copied or stored, and results disappear when you close the tab. Your employees’ pay never passes through a server of the publisher, which is therefore neither controller nor processor of it.

3. Audience counters

Three events are counted: opening the calculator page, dropping a file — transmitting nothing of the file — and clicking through to pricing. Each event increments a counter broken down by site language and by day. No cookie is set, no IP address is kept, no identifier is issued. Nothing is stored on or read from your device for this purpose; the script only reports that an event happened. Counters are kept for four hundred days, then deleted.

When a file cannot be read, the calculator also counts the type of error, taken from a fixed list (for example “headers not found”): no message, no file name, no content. To report a problem, you can prepare an anonymised diagnostic, which you review and send us yourself through the contact form; it contains no payroll data.

4. The contact form

Data

email address, message content

Purpose

answering your message

Legal basis

the publisher’s legitimate interest in answering the messages it receives (Article 6(1)(f))

Requirement

both fields are needed to reply; you may also write by post

Recipients

the publisher and its email sending provider, established in the European Union: Sendinblue SAS (Brevo)

Retention

three years from the last exchange

5. Customers and invoicing

Data

company name and address, VAT number, billing email, subscription and invoice history; the card number is entered with the payment provider and is never known to the publisher

Purposes

performing the subscription, invoicing, renewal notices, bookkeeping

Legal bases

performance of the contract (Article 6(1)(b)); accounting and tax obligations (Article 6(1)(c))

Recipients

the publisher, its payment provider Stripe Payments Europe, Limited, its accountant

Card payment

the card is entered on Stripe’s payment page; Stripe processes payment data to collect the subscription and, for fraud prevention and its own legal obligations, acts as an independent controller under its privacy policy. Data may be transferred to Stripe, Inc. in the United States, which participates in the EU–U.S. Data Privacy Framework.

Retention

the term of the contract plus five years; ten years for invoices and accounting records under French commercial law (Article L. 123-22 Code de commerce)

6. Hosting, logs and transfers

The site is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, États-Unis, acting as processor (Article 28). It processes requests technically, which involves your IP address at the moment of connection, on the basis of the legitimate interest in the site’s security and availability (Article 6(1)(f)). The publisher neither consults nor exports those logs; their retention is set by the host.

Transfers to the United States rely on the European Commission’s adequacy decision on the EU–US Data Privacy Framework (Decision (EU) 2023/1795, Article 45), under which the host is certified, and in the alternative on the Commission’s standard contractual clauses. A copy of these safeguards is available from contact@tallyra.co.

7. Your rights

You have rights of access, rectification, erasure and restriction (Articles 15 to 18) and, for data processed under the contract, portability (Article 20). Write to contact@tallyra.co or by post to the registered office; you will receive an answer within one month.

Right to object. Where processing relies on legitimate interest — contact form, technical logs — you may object at any time on grounds relating to your particular situation (Article 21).

You may lodge a complaint at any time with the supervisory authority of your habitual residence, place of work or place of the alleged infringement. As the publisher is established in France, the lead authority is the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr.

8. Controller

NORD INVEST, SAS with share capital of 1 000 €, registered with the RCS Lille Métropole under number 979 078 037, at 679 avenue de la République, 59800 Lille, France, email contact@tallyra.co, represented by the legal representative of NORD INVEST. No data protection officer has been appointed, as none is required (Article 37).