Privacy Policy

Last updated: 10 October 2026

Data controller

The notarial office publishing the site (see legal notice) is the controller of the data collected through depotdecapital.com. Contact: contact@depotdecapital.com.

Data collected

• Identity and contact details of the shareholders / subscribers (name, date and place of birth, nationality, address, email, phone).
• Where applicable, the contact details of the agent (chartered accountant, lawyer…) carrying out the steps on behalf of the client.
• Company data (name, legal form, capital, purpose, registered office).
• Beneficial owners and source of funds (AML/CFT obligations).
• Documents uploaded (identity document, proof of address, proof of registered office, draft articles of association, then Kbis and bank details after registration).

Wealth-transfer files (partner portal)

Partner firms (chartered accountants, lawyers…) may open, through their workspace, wealth-transfer files for their clients. In that context the following are processed: the subject of the request, the documents uploaded, the identity and contact details of the client concerned, and the messages exchanged between the firm, the office and, where invited, the client. The messaging space is reserved for exchanges relating to the file; no banking data should be communicated through it. Answers given in the messaging space are provided for information only: any binding legal advice is validated by the notary. The client gains access through a dated personal link sent by email, which it is their responsibility not to share.

Purposes & legal bases

• Carrying out the capital deposit and issuing the certificate — performance of the contract.
• The notary's legal obligations, including anti-money-laundering (AML/CFT) — legal obligation.
• Checking the legibility and compliance of documents, including an artificial-intelligence-assisted analysis intended to help the notary (see below) — performance of the contract / legitimate interest.
• File monitoring and communications (emails to the client and, where applicable, to the agent) — legitimate interest / contract.
• Follow-up of started but unfinished requests: if you enter your email address in the flow and then leave without submitting, the office may contact you to help you complete your deposit — legitimate interest. You may object at any time (contact@depotdecapital.com); these details are deleted after completion or after a period of inactivity.

AI-assisted analysis of documents

To help the notary detect an illegible document, an inconsistency or an anomaly, the uploaded documents may be submitted to an artificial-intelligence model provided by Anthropic (through its programming interface). This analysis is a decision-support tool: it does not replace the notary's review and entails no automated decision producing legal effects within the meaning of Article 22 GDPR — the decision rests with the notary.

The documents transmitted to this service are not used to train the models and are not retained by the provider beyond the time strictly necessary to process the request. The transfer to this provider located outside the European Union is framed by the European Commission's standard contractual clauses.

You may request that your documents be reviewed without the use of AI (a fully human review by the notary) by writing to contact@depotdecapital.com; this request has no impact on the handling of your file. [Append the signed Anthropic DPA and the no-retention (ZDR) request.]

Recipients & processors

The data is processed by the notarial office and, where applicable, communicated to the agent designated by the client (who receives the same communications). It is processed by the following technical processors:

• Supabase — database and document storage (European Union region).
• Yousign — electronic signature of the fee agreement (European Union / France).
• Resend — sending of monitoring emails (Europe region).
• Vercel — application hosting (United States).
• Anthropic — AI analysis supporting the review of documents (United States).

Transfers to providers located outside the European Union (Vercel, Anthropic) are framed by appropriate safeguards (European Commission standard contractual clauses). Each processor is bound by a data processing agreement (DPA). [Verify and append the DPAs and transfer clauses.]

Retention period

The data and documents of capital deposits that are actually completed (capital received and certificate issued) are retained in accordance with the legal obligations of notarial activity and AML/CFT regulations (in particular retention of due-diligence records for the period provided by law). [Precise periods to be confirmed: AML/CFT due diligence, notarial archiving, file documents.]

Abandoned files (a file opened but where the capital was never deposited and no certificate was issued) and their documents may be deleted after a period of inactivity, as no legal retention obligation applies to them. [Period to be confirmed by the DPO.]

The transfer files (partner portal) and their documents and messages are automatically deleted after closure and a period of inactivity (36 months by default, configurable), except where a legal retention obligation applies. [Period to be confirmed by the DPO depending on the nature of the files.]

Security

Encryption in transit (HTTPS) and at rest, restricted access to the notaries' workspace (authentication, two-factor for accounts that enable it), document viewing reserved for authorised persons, audit log of sensitive actions.

Your rights

You have a right of access, rectification, erasure, restriction and objection, within the limits of the legal retention obligations specific to notarial activity. To exercise them: contact@depotdecapital.com. You may lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr). [Indicate the DPO / GDPR point of contact if appointed.]

This English translation is provided for convenience. The French version is the legally binding text.