Privacy policy

Who is responsible

The data controller is MILDEV TECH, a French simplified joint-stock company (SAS) with a share capital of €1,000, registered with the Paris Trade and Companies Register under number 131 439 101, whose registered office is at 257 avenue Daumesnil, 75012 Paris, France, represented by François Milhem, President.

For any question about your data: contact@bettercallops.com.

When an organisation (your employer) uses BetterCallOps to manage its on-call, it is the controller of its members’ data and BetterCallOps acts on its behalf, as a processor. The commitments on this page apply in both cases.

The data we process

Depending on how you use it, BetterCallOps processes:

• Your account: name, e-mail address, language, and the identifier given by our authentication service (Clerk). If you sign in with Google, the e-mail address and name of your Google account.
• Your organisation: its name, its on-call schedules, the people taking part, the assigned on-call blocks, confirmations and changes, with their date and author.
• Your availability: the dates of your unavailable periods, entered by hand or read from your calendar (see “Your calendar” below), and the optional note you add.
• Compensation: on-call amounts, pay periods, statements and payroll exports, visible only to the roles your organisation has designated.
• Integrations: the access tokens to your organisation’s on-call tool (PagerDuty) and to your Google calendar, encrypted at rest.
• Billing: the number of seats, invoices and the organisation’s subscription state. Payment details are collected and kept by Stripe, never by us.
• Use of the service: technical events (pages viewed, actions, errors) without the content of your schedules, to understand usage and fix defects.

Your calendar

To know when you are unavailable, BetterCallOps can read your calendar, either through an iCal link you paste or through a connection to your Google account that you authorise yourself.

In both cases, BetterCallOps keeps only the dates of all-day events marked busy. The titles, guests, places and notes of your events are neither stored nor shown: they pass through the read and are forgotten. The service tells you how many events it ignored, never which ones.

With the Google connection, BetterCallOps also creates in your account a calendar named “Astreintes BetterCallOps” and writes your published on-call shifts in it. It never writes anywhere else and never reads that calendar as unavailability. You can remove the access at any time from “My availability” or from your Google account settings: the tokens are then deleted, and so is that calendar.

BetterCallOps’ use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Why, and on what basis

We process this data to:

• Provide the service: plan on-call, collect availability, prepare compensation. Basis: the performance of the contract with your organisation.
• Send you the service’s e-mails: an invitation, a period to confirm, a published schedule, an available statement. Basis: the performance of the contract. They carry no advertising.
• Read and write your Google calendar. Basis: your consent, given on Google’s authorisation screen, withdrawable at any time.
• Bill the subscription. Basis: the contract and our accounting obligations.
• Understand usage and fix defects. Basis: our legitimate interest in running a reliable service, with measurement limited to what is useful.

Who we share it with

We do not sell your data and pass it to nobody for advertising. It is processed by the following providers, on our behalf and under contract:

• Vercel (United States): hosting of the application, run in the Frankfurt region (Germany).
• Supabase: PostgreSQL database, hosted in the European Union (Paris, France).
• Clerk (United States): account creation, sign-in, sessions.
• Resend (United States): sending of the service’s e-mails.
• PostHog (European Union): usage measurement, servers in Europe.
• Stripe (United States / Ireland): payment and billing.
• PagerDuty and Google: only if your organisation or you connect those services, for the data exchange you authorised.
• The members of your organisation, according to the role it gave them: for example, a schedule’s manager sees their participants’ availability (the dates, not the notes), and only the pay roles see the amounts.

Transfers outside the European Union

Some providers are established in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s standard contractual clauses.

For how long

• Your organisation’s data is kept as long as its account exists. A person removed from an organisation is deactivated: they lose access, their compensation history stays for payroll.
• When the organisation’s account is closed, its data is deleted within thirty days, except invoices, kept ten years by legal obligation.
• The access tokens to your Google calendar are deleted as soon as you remove the access.
• Usage data is kept twelve months.

Security

Exchanges are encrypted (TLS). Access tokens to third-party services are encrypted at rest (AES-256-GCM) with a key that is not in the database. Each organisation is isolated from the others in the database. Our team’s access to production data is limited to what maintenance requires.

Cookies

BetterCallOps uses the cookies the service needs: the sign-in session (Clerk) and your language. Usage measurement (PostHog) uses no advertising cookie and does not follow you across other sites. No third-party advertising cookies.

Your rights

You can access your data, have it corrected or erased, ask for its portability, object to processing based on our legitimate interest, and withdraw a consent at any time. For data managed by your organisation, contact it first; we help it answer.

Write to contact@bettercallops.com. We answer within one month. You can also lodge a complaint with the French supervisory authority, the CNIL (cnil.fr), or your local authority.

Changes

When this page changes in a notable way, we notify the organisations’ administrators by e-mail and update the date at the top.