Last updated: February 1, 2026
1. Introduction
This Privacy Policy describes how CREACH AGENCY (SAS, €2,500 capital, RCS Paris 979 948 551, located at 60 rue François 1er, 75008 Paris) collects, uses, and protects personal data through the NEXTLEAD platform.
As a CRM for SMEs (TPE/PME), we understand the critical nature of the data you entrust to us.
2. Roles and Responsibilities
- As a Data Controller: We manage your account data (billing, login, contact).
- As a Data Processor: We process the data you import into the CRM (your leads, your customers). You remain the owner and "Data Controller" of your own client database.
3. Data Collected
A. Account Information
- Identity: Name, professional email, phone number.
- Organization: Company name, VAT number, industry.
- Billing: Transaction history (payment methods are handled securely by Stripe).
B. Google User Data (API Disclosure)
To enable CRM synchronization, NEXTLEAD requests access to your Google account.
- Data Accessed: We access your Google profile (email, name), your Google Contacts, and metadata from your email conversations (timestamps, recipients, and subject lines).
- Data Usage: This data is used exclusively to synchronize your client exchanges directly within the NEXTLEAD interface. This allows you to track all interactions with a lead or customer without leaving the CRM.
- Storage & Security: Google data is encrypted at rest (AES-256) and in transit (TLS 1.2+).
- Limited Use Policy: Our use of information received from Google APIs adheres to the Google API Services User Data Policy. We do not use Google data for advertising, nor do we allow humans to read it unless required for security or support.
4. Purposes and Legal Basis
We process data based on:
- Contract Performance: To provide the CRM service, support, and billing.