Privacy Policy
Last updated: August 13, 2026Guiding principle: RestorSignal never receives the content of your backups or the business data they contain. This policy exclusively describes the personal data tied to using the service (accounts, technical logs), not your backup data itself.
1. Data controller
The controller for the personal data described below is MargePro SASU, 11 le Grand Potron, 28480 Happonvilliers, France — contact@restorsignal.com.
2. Data collected
Operator and dashboard user accounts
- Email address, display name, role, and account status;
- Password, never stored in plaintext: only a cryptographic hash (Argon2id or bcrypt depending on availability);
- Last login timestamp, failed-login counter for brute-force protection purposes.
Runner API keys
- A public identifier and an HMAC hash of the secret — never the secret in plaintext;
- Name given to the key, status, last-used date.
Technical logs
- Server access logs (IP address, timestamp, request) kept for security and diagnostic purposes;
- Audit log of sensitive actions performed in the back-office (key creation/revocation, tenant changes, etc.).
Verification results
Results transmitted by local runners contain normalized technical metadata (opaque context identifiers, statuses, durations, structure fingerprints, error codes) — never backup content, table names, business data rows, or production credentials. This minimization principle is an architectural choice, not just a stated policy.
3. Purposes and legal bases
- Contract performance: providing the service, account management, billing;
- Legitimate interest: service security, prevention of unauthorized access, technical logging;
- Legal obligation: retention of certain accounting and billing data for the period required by law.
4. Recipients and processors
Data is hosted by OVH SAS (2 rue Kellermann, 59100 Roubaix, France), on servers located in France. The site uses an audience-measurement tool (stats.workvia.co) for aggregated traffic statistics; see the Cookies section below. No data is sold or transferred to third parties for commercial purposes.
5. Transfers outside the European Union
Data is hosted in France, within the European Union. No transfer outside the EU takes place as part of the service's standard operation.
6. Retention period
- Account data: for the duration of the contractual relationship, then archived per applicable legal obligations;
- Verification result history: per the retention period contractually chosen by the client;
- Technical security logs: a limited period needed for diagnostics and incident detection.
7. Cookies and audience measurement
The restorsignal.com site uses an audience-measurement script (stats.workvia.co) intended to produce aggregated, anonymized traffic statistics. No advertising cookie or cross-site tracker is set. You can block this script via your browser settings or a blocking extension without affecting the site's operation.
8. Your rights
Under the General Data Protection Regulation (GDPR) and French data-protection law, you have a right of access, rectification, erasure, restriction, portability, and objection over your personal data. You can exercise these rights by writing to contact@restorsignal.com. You will receive a response within the legal one-month deadline.
You also have the right to lodge a complaint with the French data protection authority (CNIL) — www.cnil.fr.
9. Data security
The technical measures implemented to protect your data are detailed on our Security page.
10. Contact
For any question about this privacy policy: contact@restorsignal.com.