Kolapsis SAS is the data controller. This page describes what the site and the licence service collect, and nothing else — the Maintenant software you install on your own servers sends no telemetry, and the data it gathers about your infrastructure never leaves your machines.
What is collected, and why
Buying a licence. Your email address, and the name and company you enter, are stored so a licence can be issued to you and an invoice raised. We also keep the customer and subscription identifiers returned by the payment provider, so a renewal or cancellation can be matched to the right licence. Legal basis: performance of the contract.
Signing in to your account. Signing in sends a single-use link to your email address. No password is stored. Legal basis: performance of the contract.
Verifying a licence. Your Maintenant instance calls our verification endpoint. Each call is logged with the calling IP address and a timestamp, so abuse and licence sharing can be detected. Legal basis: our legitimate interest in protecting the licence. Nothing about your infrastructure — hostnames, container names, metrics — is sent or stored.
Sending feedback. If you use the feedback form, what you type is stored along with the first name, email, company, edition and host count you choose to provide, and whether you agreed to be contacted about it. Legal basis: your consent.
Audience measurement. Page views are counted with a self-hosted Umami instance running on Kolapsis infrastructure. It sets no cookies, builds no cross-site profile, and no data goes to a third party.
Who processes it
| Processor | Role | Location |
|---|---|---|
| Stripe Payments Europe, Ltd. | Card payments, subscriptions, invoicing | Ireland |
| Mollie B.V. | Card and SEPA payments | Netherlands |
| Scaleway SAS | Hosting for the site and the licence service | France |
| Gandi SAS | Domain names and transactional email | France |
No personal data is transferred outside the European Union by Kolapsis SAS. The payment providers’ own transfers are governed by their respective privacy policies.
How long it is kept
- Customer records and licences: for as long as the licence is active, then for the period required by French accounting law — ten years for anything attached to an invoice.
- Licence verification log: 90 days, then deleted automatically by a nightly job.
- Feedback: until you ask for it to be removed.
- Audience statistics: aggregated, with no identifier that ties a visit back to you.
Cookies
One cookie, account_session, is set when you sign in to your account. It carries your session, expires after 24 hours, and is strictly necessary — the account area cannot work without it. There are no advertising cookies, no analytics cookies and no third-party cookies on this site.
Your rights
You have the right to access, correct, delete, restrict and port your data, and to object to processing based on legitimate interest. Where processing rests on your consent, you may withdraw it at any time.
Write to benjamin@kolapsis.com. You may also lodge a complaint with the CNIL, the French data protection authority.
Changes
If this policy changes in a way that affects you, the change will be announced on this page before it takes effect.