Legal
Data Processing Agreement
How IDEALOGY France processes personal data on behalf of JustCaster customers (Article 28 GDPR).
Last updated: 23 September 2026
Scope and roles
This agreement applies when you (the customer, as controller) use JustCaster to process personal data and IDEALOGY France, a SARL registered with the RCS of Paris under number 505 014 506, whose registered office is at 50 avenue des Champs-Élysées, 75008 Paris, France, processes it on your behalf as processor. It forms part of our Terms of Service and applies for as long as we process data for you.
Details of the processing
| Item | Description |
|---|---|
| Subject matter | Providing the JustCaster social media management service |
| Duration | The term of your subscription, plus the deletion periods below |
| Nature and purpose | Storage, publishing, analysis and display of social media content and statistics |
| Data subjects | Your team members, your clients, and the people who interact with your social accounts |
| Categories of data | Names, usernames, profile information, messages, comments, reviews, audience statistics |
| Special categories | None requested by the service; do not upload sensitive data |
Instructions
IDEALOGY processes personal data only on your documented instructions, including the instructions you give through your use of the product, unless the law requires otherwise, in which case we inform you unless that law forbids it.
Confidentiality
Everyone authorised to process your data is bound by confidentiality and is trained on data protection.
Security measures
- Encryption in transit (TLS) and encryption of stored passwords and platform access tokens.
- Role-based access, two-factor authentication and the principle of least privilege.
- Segregation of customer data at application level.
- Daily backups, regular restore tests and a documented recovery plan.
- Logging, monitoring, alerting and a documented incident procedure.
- Hosting in France with IONOS and OVH, in data centres with recognised security certifications.
- Review of measures at least once a year.
Sub-processors
You authorise the use of the sub-processors below. We inform you at least 30 days before adding or replacing a sub-processor, and you may object on reasonable data protection grounds; if we cannot offer an alternative, you may end the affected service.
| Purpose | Sub-processor | Location |
|---|---|---|
| Hosting and infrastructure | IONOS SARL | France |
| Hosting and infrastructure | OVH SAS (OVHcloud) | France |
| Transactional e-mail | IONOS SARL | France |
Payment processing and AI content generation are carried out by additional providers whose current names are available on request at [email protected].
Data subject requests
We help you answer requests from individuals exercising their rights, through the export, correction and deletion tools in the product and, where needed, with our support team.
Personal data breaches
We notify you without undue delay, and in any case within 48 hours, after becoming aware of a breach affecting your data, with the information you need for your own notifications.
International transfers
Data is hosted in France. Any transfer outside the European Economic Area is covered by the European Commission's Standard Contractual Clauses and the additional safeguards required.
Deletion and return
You can export your data at any time from the product. When your subscription ends, we delete your data within 30 days, and from backups within 90 days, unless the law requires us to keep it. We confirm the deletion in writing on request.
Audits
We make available the information needed to demonstrate compliance with Article 28 GDPR. You may request an audit once a year, with 30 days' notice, during business hours and without disrupting the service; we may answer with an up-to-date third-party report where one exists.