Valoryn

Politique de Confidentialité

Last updated: October 17, 2026

1. General presentation

This privacy policy explains how Valoryn collects, uses, stores and protects personal data processed through:

  • from the Valoryn website;
  • from the PoliceScan application;
  • of the Valoryn Académie platform;
  • of the SynchronIA application, according to the details in section 22.

The publisher and responsible for the processing described in this policy is:

Valoryn
Sole proprietorship represented by Jordan Marchais
SIREN: 902 041 300
Address: 3 rue de l’Hôtel-de-Ville, 17400 Saint-Jean-d’Angély
Email: contact@valorynai.com
Website: www.valorynai.com

Each processing of personal data is based on a specific purpose and an appropriate legal basis, in particular the execution of a contract, compliance with a legal obligation, the legitimate interest of Valoryn or consent when this is required.

SECTION 1 — VALORYN

2. Data collected on the Valoryn site

When using the Valoryn site, the following data may be collected:

  • first and last name;
  • email address;
  • phone number;
  • company and professional function;
  • content of requests sent by the contact form;
  • data relating to orders and payments;
  • connection data and technical information;
  • cookie preferences;
  • trading history with Valoryn.

Mandatory data is flagged when collected. In the absence of certain necessary information, Valoryn may not be able to respond to a request or provide the relevant service.

3. Purposes and legal bases

The data is used for:

  • respond to contact requests;
  • present Valoryn services and solutions;
  • manage customer accounts;
  • manage orders, payments and invoices;
  • provide customer support;
  • prevent fraud and secure the site;
  • comply with accounting, tax and legal obligations;
  • transmit commercial communications when permitted.

Depending on the processing concerned, the legal bases used are:

  • the execution of a contract or pre-contractual measures;
  • compliance with a legal obligation;
  • the legitimate interest of Valoryn in securing and improving its services;
  • consent for processing that requires it.

4. Recipients

Data is accessible only:

  • to authorized persons within Valoryn;
  • to hosting and maintenance providers;
  • to payment providers;
  • to messaging and support tools;
  • to accountant and professional advice when necessary;
  • to the competent authorities when required by law.

Valoryn does not sell or rent personal data to third parties.

SECTION 2 — POLICESCAN

5. Presentation of PoliceScan

PoliceScan is a SaaS solution intended for purchasing and resale professionals.

It allows in particular:

  • the recording of purchases;
  • the management of a digital police register;
  • management of individual and professional sellers;
  • inventory tracking;
  • sales record;
  • the calculation and export of VAT-related data;
  • stock transformation;
  • the generation of receipts, purchase vouchers and documents;
  • preparing sales on connected platforms.

6. Distribution of responsibilities

PoliceScan account data

For data relating to the user account, subscription, billing, support and security of the service, Valoryn acts as data controller.

Data recorded by users

For data relating to sellers, customers, purchases, identity documents, objects, inventories and sales entered by a professional in PoliceScan:

  • the professional user determines the purposes of the collection;
  • he remains responsible for the legality, accuracy and retention period of the recorded information;
  • Valoryn technically processes this data in order to provide PoliceScan and acts, depending on the circumstances, as a data processor on behalf of the user.

The processing entrusted to a service provider must be contractually regulated and carried out according to the instructions of the data controller.

7. Data processed by PoliceScan

PoliceScan can handle the following categories:

  • last name, first name and contact details of the user;
  • email address and authentication data;
  • account and subscription information;
  • company name, SIREN or SIRET, address and professional contact details;
  • company logo and information;
  • information relating to individual or professional sellers;
  • name, first name, address and identification information necessary for recorded transactions;
  • identification document references and associated documents when added;
  • information relating to goods purchased or sold;
  • photographs of objects;
  • purchase and sale amounts;
  • inventory data;
  • data necessary for tax and accounting calculations;
  • purchase receipts, vouchers and generated documents;
  • data linked to WooCommerce, eBay connections or other services;
  • technical logs, security information and diagnostic data.

8. Purposes of PoliceScan processing

The data is processed for:

  • create and secure user accounts;
  • provide functionality of PoliceScan;
  • enable the recording and traceability of purchases and sales;
  • manage inventories and stock transformations;
  • produce the documents requested by the user;
  • calculate and export data useful for accounting;
  • connect PoliceScan to platforms chosen by the user;
  • manage subscriptions and payments;
  • provide technical support;
  • detect anomalies, errors and unauthorized access;
  • comply with the legal obligations of Valoryn.

9. Hosting and technical service providers

PoliceScan uses Google services Firebase for authentication, databases, storage and certain technical functions.

Google publishes data processing and security terms for Firebase services. Firebase customers are generally responsible for the processing of their own users’ data, while Google provides the technical infrastructure under its applicable terms.

Other service providers can intervene to:

  • hosting;
  • payment;
  • sending emails;
  • document generation;
  • artificial intelligence used for certain functions;
  • connections to sales platforms;
  • monitoring and security of the service.

The list of main data processors may be communicated on request or published in dedicated documentation.

10. Security

Valoryn implements technical and organizational measures proportionate to the risks, in particular:

  • user authentication;
  • access control;
  • communications encryption;
  • database security rules;
  • technical logging;
  • limitation of administrative access;
  • backups and continuity mechanisms;
  • monitoring of incidents and anomalies.

Since no computer system can guarantee zero risk, the user must also protect their identifiers, use a secure password and limit access to their account. The GDPR requires data controllers and subcontractors to implement measures adapted to the risks linked to the data processed.

11. Responsibility of the user PoliceScan

The user is responsible for:

  • of the lawfulness of the data it collects;
  • information from sellers, customers and other data subjects;
  • the accuracy of the information recorded;
  • determining appropriate retention periods;
  • for the management of requests for access, rectification or erasure concerning the data that it has itself collected;
  • compliance with its professional, tax and regulatory obligations;
  • security of devices and credentials used to access PoliceScan.

SECTION 3 — VALORYN ACADEMY

12. Presentation of Valoryn Académie

Valoryn Académie is an online training platform for purchasing and following professional training courses.

13. Data collected

As part of Valoryn Académie, the following data may be collected:

  • first and last name;
  • email address;
  • billing address;
  • company information;
  • account login data;
  • training purchased;
  • progress in courses;
  • modules and lessons consulted;
  • results of questionnaires or exercises;
  • resource downloads;
  • order and payment history;
  • requests to support;
  • technical and safety information.

Complete banking data is not directly stored by Valoryn when processed by a payment provider.

14. Purposes and legal bases

The data is used for:

  • create and administer the student space;
  • process orders and payments;
  • provide access to purchased training;
  • save progress;
  • provide educational resources;
  • respond to support requests;
  • prevent fraudulent sharing of access;
  • protect training content;
  • manage invoices and accounting obligations;
  • improve training;
  • notify students of important updates.

These treatments are mainly based on:

  • execution of the training contract;
  • compliance with legal obligations;
  • the legitimate interest of Valoryn in securing its platform and protecting its content;
  • consent when this is necessary.

15. Content protection and account security

In order to protect training and limit fraudulent use, Valoryn may record:

  • connection dates and times;
  • the devices or browsers used;
  • IP addresses;
  • connection attempts;
  • unusual access;
  • progress in training.

This information is used only to the extent necessary for account security, fraud prevention, and content protection.

COMMON PROVISIONS

16. Shelf life

The data is kept only for the duration necessary for the purposes for which it was collected, then may be archived for the periods imposed by legal obligations or necessary for the defense of the rights of Valoryn.

The durations may depend in particular on:

  • the duration of the contract or subscription;
  • of the existence of an active account;
  • accounting and tax obligations;
  • professional obligations applicable to the user;
  • of the applicable limitation period;
  • of a pending dispute or request.

The CNIL reminds that a retention period must be defined according to the objective of the processing and that the data must not be kept indefinitely without justification.

17. Data transfers outside the European Union

Some technical service providers may process data from countries outside the European Union.

Where necessary, Valoryn relies on applicable legal mechanisms, such as:

  • an adequacy decision;
  • standard contractual clauses;
  • appropriate supplementary safeguards.

Google notably publishes contractual clauses relating to certain data transfers concerning its Firebase services.

18. Rights of individuals

In accordance with the GDPR and the Data Protection Act, data subjects may have the following rights, depending on the processing and its legal basis:

  • access right;
  • right of rectification;
  • right to erasure;
  • right to restriction of processing;
  • right of opposition;
  • right to portability;
  • right to withdraw consent at any time;
  • right to define guidelines relating to the fate of their data after their death;
  • right to lodge a complaint with the CNIL.

The legal basis used may impact the rights applicable to each processing operation.

To exercise a right regarding an Valoryn, PoliceScan or Valoryn Académie account:

contact@valorynai.com

When a request concerns data entered into PoliceScan by a professional user, the person concerned must first contact this professional, who acts as responsible for processing this data.

Proof of identity may be requested only when necessary to verify the identity of the applicant.

19. Cookies and trackers

The site may use cookies necessary to:

  • connection;
  • security;
  • basket storage;
  • order management;
  • access to training;
  • preservation of preferences.

Non-essential cookies, in particular those linked to statistics, advertising or external content, are only placed after obtaining consent when this is required.

Preferences can be modified from the cookie management tool accessible on the site.

20. Policy modification

Valoryn may modify this policy to take into account:

  • legal or regulatory developments;
  • technical changes;
  • the addition of new features;
  • of the evolution of PoliceScan, SynchronIA or Valoryn Académie;
  • of the change of service providers.

The applicable version is that published on the site on the date of consultation.

21. Contact

For any questions regarding this policy or the use of personal data:

Valoryn
Email: contact@valorynai.com
Address: 3 rue de l’Hôtel-de-Ville, 17400 Saint-Jean-d’Angély

Data subjects can also send a complaint to the National Commission for Information Technology and Liberties.

22. SynchronIA — data, connections and artificial intelligence

SynchronIA has its own technical project, separate from PoliceScan. Data from one service is not transferred to the other simply because both applications are published by Valoryn. Any proposed connection or transfer operation must be described and activated according to the conditions of the service concerned.

The data concerned includes, depending on the functions used: identity and email address of the account, authentication information, subscription rights and transaction references, product sheets, titles, descriptions, references, categories, quantities, prices, photographs added by the user, store identifiers and advertisements, connection authorizations and publication or synchronization logs.

These treatments are used to administer the account and subscription, prepare articles, publish on selected platforms, synchronize information, diagnose errors and secure the service. For account, billing and support data, Valoryn acts as data controller. For personal data entrusted in a professional catalog, the professional remains responsible for the purposes and Valoryn acts as a subcontractor when carrying out its instructions; this role must be framed by an appropriate processing agreement.

The SynchronIA infrastructure is based on Google Firebase for technical account, database, storage and processing functions. The assisted analysis functions use the OpenAI API: the images or information necessary for the analysis are transmitted to it when using these functions. The identification scan must be distinguished from the sales photographs added to the file and sent to the stores. Images transmitted to an analysis service may be subject to technical processing specific to this service provider; the absence of registration in the catalog does not mean that no processing takes place with this service provider.

The eBay, WooCommerce or Shopify platforms receive the information necessary for the actions that the user intends for them. The data sent and the authorizations depend on the activated connection and the function used. RevenueCat and the relevant store may intervene in the management and verification of in-app purchases when this subscription channel is used. These providers and platforms also apply their own data protection rules as part of their respective roles.

The user must select photos and descriptions that they have the right to have, avoid unnecessary personal data in images or advertisements and verify the generated results before publication. Disconnecting a store or deleting an Valoryn account does not automatically delete ads or data already transmitted to a third-party platform; a separate action with this platform may be necessary.

To exercise a right concerning your account or request its deletion: contact@valorynai.com, indicating SynchronIA and the account address. Proportionate verification of identity may be necessary. Data subject to a legal obligation or necessary for the defense of a right are not deleted without taking these obligations into account. The storage and transfer information in the common provisions apply; operational durations and transfer guarantees specific to service providers must be specified before the full commercial opening of the service.

If you contact Valoryn for information about the launch of SynchronIA, your contact details and message are used to process this request. A request for information does not constitute consent to receive a newsletter.