Transparency and security for your data.
In case of discrepancy, the French version of this document prevails.
GrapeTrack, a French simplified joint-stock company (SAS) with a share capital of EUR 74,000.00, registered with the Montpellier Trade and Companies Register (RCS) under number 930 216 072, whose registered office is located at Appt 64 RDC, 406 Rue de la Pépinière, 34000 Montpellier, publisher of the ŒnoT mobile application, is committed to protecting the privacy of its users.
GDPR compliance: Our processing of personal data complies with the General Data Protection Regulation (GDPR) and the French "Informatique et Libertés" law.
GrapeTrack SAS
| Data Type | Details | Purpose |
|---|---|---|
| Contact | Last name, First name, Email | Account management |
| Location | GPS of vineyard plots | Geolocation of observations |
| Content | Photos, Audio | AI analysis and Reports |
The ŒnoT application uses artificial intelligence services provided by OpenAI, Inc. (https://openai.com) and Mistral AI (https://mistral.ai) for certain features. Before any use of these features, we inform you and request your consent.
| Data type | Details | Provider | Use |
|---|---|---|---|
| Voice recordings | Voice dictations (field observations, tasting notes) | OpenAI | Transcription to text (Whisper API) |
| Text | Transcriptions, observations, tasting notes | OpenAI, Mistral AI | Structuring and analysis (language models) |
| Photos | Images of vines and vineyard plots | OpenAI | Visual analysis of diseases and ripeness (GPT-4 Vision) |
| Report content | Oenological reports edited by the user | OpenAI, Mistral AI | Editing and improvement assistance |
Data is sent only when you actively use the relevant features: voice recording, taking a photo with analysis, creating or editing reports with AI assistance. No data is transmitted to these providers in the background without your action.
Data protection: OpenAI commits not to use data sent via its APIs to train its models (see the API data usage policy). Mistral AI applies equivalent confidentiality commitments for data processed through its APIs. Transmission to both providers is carried out securely (HTTPS) and the data is not retained beyond the processing of the request.
Before the first use of the AI features, the application explicitly asks you to accept the sending of your data to OpenAI and Mistral AI. You can decline and continue to use ŒnoT without these features (manual entry, without voice transcription or AI photo analysis).
Our website oenot.io and the ŒnoT mobile application use cookies and equivalent tracking technologies (SDKs, pixels, advertising identifiers) to measure audience, understand user journeys and improve our marketing campaigns.
| Tool | Publisher | Purpose | Legal basis |
|---|---|---|---|
| Google Analytics (gtag) | Google LLC (United States) | Audience measurement, traffic statistics | Consent |
| Amplitude | Amplitude, Inc. (United States) | Product behavioral analytics (journeys, events) | Consent |
| Meta Pixel (Facebook Pixel) | Meta Platforms Ireland Ltd. (Ireland) | Measuring the effectiveness of our Facebook / Instagram advertising campaigns, retargeting and creation of lookalike audiences | Consent |
| Umami / Session Replay (analytics.damoul.com) | GrapeTrack SAS (European hosting) | Anonymous audience measurement and masked session recording for UX diagnostics | Legitimate interest (anonymized) |
We have integrated the Meta Pixel on our website and trigger certain conversion events (page view, demo request, contact form submission, account creation, trial start, subscription, purchase) in order to measure the effectiveness of our advertising campaigns on Facebook and Instagram, and to show personalized ads to people who may be interested in ŒnoT.
The data transmitted to Meta may include: your IP address, information about your browser and device, the URL visited, as well as a Facebook identifier (_fbp, _fbc cookies) if you are logged in to your account. Meta acts as a joint data controller for the collection and transmission of this data, in accordance with the CJEU Fashion ID ruling. Data may be transferred to the United States on the basis of the Standard Contractual Clauses and the EU–US Data Privacy Framework.
For more information on the processing carried out by Meta, see its privacy policy and its joint controller addendum.
In addition to the browser-side Meta Pixel, we use Meta's Conversions API (CAPI) to transmit certain conversion events directly from our servers to Meta. These events are strictly the same as those of the Pixel (account creation, trial start, subscription, purchase) and are deduplicated using a shared event identifier.
Before transmission, personal data (email, phone number, user identifier) is irreversibly hashed with SHA-256 (a standard required by Meta). No plain-text data is transmitted. CAPI makes it possible to measure conversions even when the client-side pixel is blocked (ad blockers, iOS ATT, cookie refusal) and is only enabled when you have consented to tracking.
In accordance with Article 82 of the French "Informatique et Libertés" law and the recommendations of the CNIL, no advertising cookie or tracker (Google Analytics, Amplitude, Meta Pixel, Meta CAPI) is set before you have given explicit consent via our consent banner displayed on your first visit.
The ŒnoT mobile application integrates the Facebook SDK (react-native-fbsdk-next) to measure the effectiveness of our acquisition campaigns (Facebook and Instagram ads). This SDK transmits to Meta events related to the use of the application:
fb_mobile_first_app_open) – triggered on first launchfb_mobile_activate_app) – on each launchfb_mobile_complete_registration)StartTrial)fb_mobile_initiated_checkout)fb_mobile_add_payment_info)Subscribe)Tracking transparency framework:
No personal content (voice observations, photos of vineyard plots, oenological notes, business data) is transmitted to Meta. Only the conversion events listed above, together with technical identifiers (IDFA/AAID if authorized, SHA-256 hashed user identifier, SHA-256 hashed email), are transmitted. For more information, see Meta's privacy policy.
Your data is used exclusively to:
🚫 No sale of data: We never sell your data to third parties for commercial purposes.
We apply high security standards:
You have the right to access, rectify, erase and port your data.
To exercise these rights, contact our DPO:
For any question relating to this privacy policy or the exercise of your rights:
You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) if you consider that the processing of your personal data constitutes a breach of the applicable regulations.