Privacy policy

Translation for information only. The Spanish version is binding.

Last updated: 29 October 2026

We process personal data only to the extent necessary for the website and the service. We do not use cookies for advertising or analytics purposes, nor any tracking tools.

2.1 Controller

SAS Delimonde, c/o Grandoro France, Avenue Noël Navoizat, 21400 Châtillon-sur-Seine, France · Email: hola@benventario.app. No data protection officer has been appointed.

2.2 Two roles: your account data and the data of your coffee mill

• We are the controller for the data of website visitors, of enquiries and for the account and contract data of our customers.
• The customer (the coffee mill) is the controller for everything it records in its Benventario instance: producers, plots, deliveries, staff, attendance, wages, photos and samples. We process that data only on its behalf (Art. 28 GDPR), in accordance with the data processing agreement in Annex A to the terms of use. Data subjects should preferably address their questions to the coffee mill.

2.3 Visiting the website

When you open benventario.app, our server stores the following for operation and to defend against attacks: IP address, date and time, requested page, browser identification and referring page. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). The logs are deleted after 14 days.

Fonts and images are hosted on our own server; visiting the site does not transmit any data to third parties such as Google. Clicking the WhatsApp button opens WhatsApp (Meta); WhatsApp's terms apply there.

2.4 Contact form and enquiries

If you use the form or write to us, we process your name, coffee mill, country, quantity per harvest, WhatsApp number or email address, your message, the date and time and the IP address. We use them to answer your enquiry and to arrange a demo (Art. 6(1)(b) GDPR, pre-contractual measures). The IP address serves to protect us from abuse (point (f)). We delete enquiries 12 months after the last contact if no contract is concluded.

2.5 Registration for the free trial and customer account

When you register we process: name of the coffee mill, desired address (<name>.benventario.app), country, your name, email address, telephone (optional), administrator username and password, language, date and time and IP address. The password is stored only as a hash, never in plain text. Purpose: setting up and operating your instance, contact regarding the contract and invoicing (Art. 6(1)(b) GDPR). To prevent abuse we count registrations per IP address; that count is deleted after 2 days. Billing data are retained for as long as required by commercial and tax law (in France, 10 years for accounting records).

In our customer view we see only indicators for each instance (plan, number of receptions and of users, date of the last operation, size, whether encryption is active), never its content.

2.6 Operation of the cloud instance

• Own instance: each coffee mill has its own process and its own database.
• On-device encryption (optional): if activated, the names and contact details of producers and staff, ID card numbers (cédulas), staff photos and plot coordinates are already encrypted on the device (AES-GCM, 256 bits). Only the coffee mill's devices and its recovery sheet hold the key. We cannot read that data or recover it if the key is lost. Figures without names (quantities, lots, moisture, amounts) remain readable, so that inventory, reminders and reports keep working.
• Support: our support access sees data only if the coffee mill authorises it for a limited time; every access is logged.
• Signing in to the app: sessions, the device identification (browser) and the time of the last connection are stored, so that the coffee mill can see which devices still need to send operations. With passkeys the server stores only the public key.
• Push notifications (optional): if a user allows push, reminders are delivered via their browser's push service (e.g. Google, Mozilla, Apple). The content is end-to-end encrypted; the push service sees only the device address.
• Weather: for the forecast on the drying patio, the server sends the coffee mill's coordinates to Open-Meteo. No personal data are transmitted.
• Producer portal: producers see their deliveries via a personal link with a PIN. The coffee mill decides what is shown. With encryption, the key is only in the link.
• Backups: every night a copy of the instance on our server and, in addition, an encrypted copy on a second server in Germany. With on-device encryption activated, the protected fields also remain encrypted in the backups.

2.7 Recipients and transfers to third countries

• Hosting: The Constant Company, LLC (Vultr), USA; data centre in Miami, USA. Basis for the transfer: standard contractual clauses of the European Commission (Art. 46 GDPR) with Vultr's data processing agreement.
• DNS and certificates: Cloudflare, Inc. (name resolution only, content does not pass through it) and Let's Encrypt (ISRG) for the HTTPS certificates.
• External backup: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany; data centre in Germany. Encrypted files only.
• Payments: Stripe Payments Europe, Ltd., Dublin, Ireland, for collection, invoices, tax calculation and the customer portal (change card, cancel). Stripe also transfers data to Stripe, Inc., USA (EU–US Data Privacy Framework) and is itself the controller for payment data (stripe.com/privacy). The customer enters their card details directly with Stripe; we receive only the payment status, the card type, the last four digits, the billing address and the tax number.
• Email / WhatsApp: if you contact us through these channels: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Workspace, email) or WhatsApp Ireland Limited (Meta). Google may also process data in the USA (EU–US Data Privacy Framework).

We do not sell data or use it for advertising.

2.8 Retention periods

Instance data are retained for the duration of the contract. When it ends, the coffee mill can export its data for 30 days; we then delete the instance and, 30 days later, the last backups. A trial instance that has not been subscribed is deleted 90 days after the last sign-in, after prior notice; we then keep it for a further 30 days as an archive.

2.9 Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Arts. 15 to 21 GDPR). Write to us at hola@benventario.app. You can lodge a complaint with the French data protection authority CNIL: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr.

If the data concerned were recorded about you by a coffee mill (e.g. as a producer or worker), please contact that coffee mill; we will help you.

2.10 Security

All connections are encrypted via HTTPS. Passwords are stored only as a hash, the PIN is locked after 5 failed attempts and administrators can sign in with a passkey. Each instance runs separately from the others.