Skip to content
pitly← Home

Privacy policy

Last updated: 28 July 2026

This English version is provided for information purposes only. The French version is the legally binding one.

This policy explains which personal data Pitly collects, why it is collected and how you remain in control, in accordance with the General Data Protection Regulation (GDPR).

Data controller

Lainup SAS, publisher of Pitly (see the legal notice). Contact: [email protected].

Data we collect

  • On this website, pitly.net (formerly pitly.fr): anonymous audience statistics, only with your consent (see the cookie policy).
  • Account: name, email address and password (hashed, never stored in plain text).
  • Content you add in the application: vehicles, maintenance, fuel logs, reminders, inventory, photos and uploaded invoices.
  • Technical data: last activity date and notification tokens (Web Push or iOS device) if you enable notifications.

Pitly does not perform advertising profiling and does not sell personal data.

Purposes and legal basis

Account and content data is processed to provide the service (performance of a contract) and send required emails, such as verification and password-reset messages. Website analytics rely on your consent under Article 6(1)(a) GDPR, collected through the cookie banner.

Retention

Account data is retained while your account remains active and deleted when the account is removed. Analytics data is retained according to PostHog Cloud settings, with a default retention period of one year for events.

Processors

  • Hosting: OVH SAS (Roubaix, France), with data stored in the European Union.
  • Analytics: PostHog Cloud EU (Frankfurt, Germany), only with your consent.

These providers use your data solely to deliver their services.

Your rights

You have rights of access, rectification, erasure, portability and objection. From the My account section, you can at any time:

  • Export all your data in JSON format.
  • Delete your account and all associated data permanently.

For personal-data requests, email [email protected]. We answer access, rectification, erasure and portability requests within one month. For other requests, email [email protected]. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

Security

Passwords are hashed with Argon2id, data in transit is encrypted over HTTPS and access to stored data is isolated by user account.