Privacy Policy

Last updated: March 11, 2026

1. Data Controller

Sycamore SAS, headquartered in Paris, France.
Contact: hello@gethora.com

2. Data Collected

Data	Purpose	Legal basis
Name, email	Account management	Contract performance
WhatsApp number	Sending reports	Contract performance
Staff names and WhatsApp numbers	Receiving and processing hours	Contract performance
WhatsApp messages (text and voice)	AI extraction of working hours	Contract performance
Hourly rates	Calculating amounts owed	Contract performance

3. Sub-processors

Your data is processed by the following sub-processors:

• Supabase (database hosting) — servers in Europe (Frankfurt)
• Google Gemini (AI message analysis) — messages are sent to the Google API for hour extraction only
• Meta / WhatsApp (messaging) — official WhatsApp Business API
• Cloudflare (website hosting) — global servers
• n8n (automation) — cloud hosting in Europe

4. Data Retention

Your data is retained for the duration of your use of the service. Upon account deletion, all data is erased within 30 days.

5. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: view all your data via your dashboard
• Right of rectification: modify your information at any time
• Right of erasure: delete your account and all your data from the dashboard
• Right to portability: export your data on request by email
• Right to object: object to the processing of your data

To exercise these rights: hello@gethora.com

6. Security

Data is encrypted in transit (HTTPS/TLS) and at rest. Access keys are stored securely and are never publicly exposed. Data access is restricted by database-level security policies (Row Level Security).

7. Cookies

hōra does not use tracking or advertising cookies. Only technical cookies necessary for authentication are used.

8. International Transfers

Some sub-processors (Google, Cloudflare) may process data outside the EU. These transfers are governed by the European Commission's standard contractual clauses.

9. Complaints

If you have a complaint, you may contact the CNIL (French data protection authority): www.cnil.fr