Legal Information

1. Legal Notice

Site publisher

Ovalead is a trade name / brand operated by:

SEVENTIC
Legal form: French Limited Liability Company (SARL)
Share capital: €7,500
Registered office: 240 Rue Championnet, 75018 Paris, France
Trade register (RCS): Paris 479 474 215
SIRET (head office): 479 474 215 00023
EU VAT number: FR54 479 474 215
APE/NAF code: 70.22Z (Business and other management consultancy activities)
Phone: +33 1 53 06 39 00
Email: contact@ovalead.com

Publication director

Sylvain Boué, acting on behalf of SEVENTIC SARL.
Contact: contact@ovalead.com

Hosting

Render Services Inc.
525 Brannan Street, Suite 300
San Francisco, CA 94107, United States
render.com

User data (accounts, jobs, enriched contacts) is stored on the Supabase platform (Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992) with infrastructure located in the eu-west-1 (Ireland) region.

Trademark and intellectual property

The "Ovalead" name, the associated logo, the visual identity, and the application source code are the exclusive property of SEVENTIC SARL. Any unauthorized reproduction or use is prohibited.

Reporting content

For any request regarding content published on Ovalead or to report an issue, write to contact@ovalead.com with the subject line "Legal report".

2. Terms of Service

Article 1 — Purpose

Ovalead is an online application (SaaS) that allows its users to enrich professional contacts with publicly available information from LinkedIn, detect job changes, look up business email addresses through third-party integrations, and synchronize this data with their CRM tools.

Article 2 — Acceptance

Using the service implies full and unreserved acceptance of these Terms of Service as well as the privacy policy and cookie policy. Ovalead reserves the right to modify the Terms at any time; changes are enforceable against users as soon as they are published on this page.

Article 3 — Sign-up and user account

Access to Ovalead's features requires creating an account with a valid business email address and a password meeting the security criteria (minimum 8 characters). The user is responsible for keeping their credentials confidential.

Ovalead is intended exclusively for B2B professional use. Sign-up is reserved for professionals acting in the course of their business activity.

Article 4 — Service description and user obligations

Ovalead operates by using the LinkedIn sessions provided by the user (session cookies). The user represents and warrants that they:

• Are the legitimate owner of the LinkedIn accounts whose cookies they provide, or have the right to use them;
• Have read LinkedIn's terms of use and accept sole responsibility for any consequences;
• Use the service in compliance with applicable laws, in particular regarding the protection of personal data (GDPR);
• Do not use Ovalead for spam, abusive prospecting, harassment, or any unlawful purpose;
• Have a legal basis (legitimate interest or consent) to process the personal data of the prospects they import;
• Respect the right of objection of the people whose data is processed.

Ovalead shall in no event be held liable for any consequences of use that is contrary to LinkedIn's terms, nor for any sanctions LinkedIn may apply to user accounts (suspension, ban, restriction).

Article 5 — Pricing and payment

Ovalead offers several subscription plans described on the public pricing page. Payments are processed by Stripe Payments Europe Limited (Dublin, Ireland). Subscriptions are monthly and renew automatically.

A 14-day free trial is offered upon first subscription. At the end of this period, the subscription switches to active billing unless canceled beforehand from the management portal (Stripe Customer Portal accessible from the app).

5.1 — Right of withdrawal: in accordance with Article L.221-28 of the French Consumer Code, since the service is provided in digital form with the customer's express consent to begin performance before the end of the withdrawal period, the right of withdrawal does not apply once performance has begun. Cancellation remains possible at any time for future billing periods.

5.2 — Price revision: Ovalead reserves the right to revise its prices. Any change will be notified by email to the user with a minimum 30-day notice. A user who does not accept the new pricing may cancel their subscription before it takes effect. Otherwise, the new pricing applies at the next renewal.

5.3 — Late payment (Article L.441-10 of the French Commercial Code): in the event of late payment, and without prejudice to other remedies, Ovalead reserves the right to apply automatically, from the first day of delay:

• Late payment penalties at a rate of three (3) times the legal interest rate in force, calculated on the gross amount due;
• A flat-rate collection fee of €40, without prejudice to additional compensation if the costs actually incurred are higher.

Service may be suspended 10 days after a formal notice has remained without effect.

Article 6 — Availability and service levels

Ovalead strives to ensure 24/7 availability of the service. As an indicative target and without binding contractual commitment:

• Paid plans (Pro and above): targeted monthly availability of 99.5%, excluding scheduled maintenance and force majeure events;
• Free plan: availability provided as-is, with no guaranteed target.

Scheduled maintenance interruptions will be announced by email or in-app with a minimum 48-hour notice, except in emergencies. Outages or restrictions decided by LinkedIn or by Ovalead's technical subprocessors (Supabase, Render, Stripe) are not attributable to Ovalead.

Article 7 — Suspension and termination

Ovalead reserves the right to suspend or terminate any account without notice in the event of a serious breach of these Terms (fraudulent, abusive, unlawful use, or infringement of third-party rights). Users may cancel their subscription at any time through the Stripe portal; access is retained until the end of the paid period. User data is retained for 30 days after termination, then permanently deleted unless a legal retention obligation applies.

Article 8 — Intellectual property

All elements making up the Ovalead service (interface, source code, algorithms, logos, editorial content) are protected by intellectual property law and remain the exclusive property of SEVENTIC SARL.

Data imported by the user: the user retains full ownership of the data they import into the platform. They grant Ovalead a limited, non-exclusive license, necessary solely to perform the service. Ovalead claims no ownership rights over imported data.

License on exports: exports and enrichment results obtained by the user through their account are granted under a perpetual, non-exclusive, internal-use license, in compliance with the legal bases applicable to the personal data concerned.

Article 9 — Limitation of liability

To the maximum extent permitted by law, Ovalead's liability is limited to the amounts actually paid by the user during the twelve months preceding the event giving rise to the damage. Ovalead shall not be held liable for indirect damages, loss of opportunity, loss of profit, or data loss caused by a subprocessor.

Enriched data — no accuracy guarantee: data enriched by Ovalead comes from public sources (LinkedIn in particular). Ovalead does not guarantee the accuracy, completeness, or up-to-date nature of this data. The user is solely responsible for commercial decisions made based on this data.

Article 10 — Force majeure

No party shall be held liable for the non-performance of its obligations resulting from a force majeure event within the meaning of Article 1218 of the French Civil Code, in particular:

• Outage, restriction, or change to LinkedIn's API access conditions or to integrated third-party platforms;
• Failure of technical subprocessors (Supabase, Render, Stripe) beyond Ovalead's control;
• Natural disaster, terrorist act, governmental decision, pandemic;
• Large-scale cyberattack affecting hosting infrastructure.

The affected party will inform the other as soon as possible and will endeavor to remedy the situation. If the event lasts more than 30 days, either party may terminate the contract without penalty.

Article 11 — Evidence convention

The user expressly acknowledges and accepts that Ovalead's IT systems and logs constitute evidence of communications, orders, and payments between the parties, except in case of manifest error demonstrated by the user.

The data recorded in Ovalead's IT system shall have, between the parties, the same evidentiary value as a signed document. The archival of transaction-related data is carried out on a reliable and durable medium.

Article 12 — Mediation and dispute resolution

In the event of a dispute relating to the interpretation or performance of these Terms, the parties undertake to seek an amicable solution within 30 days of the written notification of the dispute.

In accordance with Article L.616-1 of the French Consumer Code, consumer users may freely turn to a consumer mediator with a view to amicable resolution. The competent mediator will be appointed prior to any referral and communicated upon request at contact@ovalead.com.

In the event of failure of mediation, or in the absence of an amicable agreement within the allotted time, the dispute shall be submitted to the competent courts in the district of Ovalead's registered office.

Article 13 — Assignment of contract

The user may not assign all or part of their rights and obligations under these Terms without Ovalead's prior written consent.

Ovalead reserves the right to assign this contract to any successor or acquirer in the event of merger, acquisition, asset sale, or restructuring, without this constituting a substantial change to the service conditions. The user will be informed by email with a 30-day notice and may cancel their account if such assignment causes them demonstrable harm.

Article 14 — Governing law and jurisdiction

These Terms are governed by French law. Any dispute relating to their interpretation or performance shall, failing amicable resolution as set out in Article 12, fall within the exclusive jurisdiction of the competent courts in the district of Ovalead's registered office.

3. Privacy Policy

This policy describes how Ovalead collects, uses, and protects your personal data within the Ovalead service, in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the amended French Data Protection Act.

Data controller

Ovalead, whose contact details appear in the legal notice, is the controller of the data collected through the Ovalead service.

Contact for any GDPR-related question: contact@ovalead.com with the subject line "GDPR".

Data collected and purposes

Data imported by the user — important details

When you import a CSV file of prospects, you are considered the data controller for that data within the meaning of the GDPR. Ovalead acts as a data processor in accordance with Article 28 of the GDPR. A Data Processing Agreement (DPA) can be provided upon request at contact@ovalead.com.

You warrant that you have a legal basis (consent, documented legitimate interest, performance of a contract) to process this data and that you have informed the data subjects in accordance with Articles 13 and 14 of the GDPR.

Retention period

• User account: until the account is deleted, then 6 months in technical archive.
• Imported and enriched data: kept as long as the workspace exists; deleted upon account termination or on request.
• LinkedIn cookies: kept as long as the user keeps them active; deleted on request.
• Billing data: 10 years (accounting and tax obligation).
• Technical logs: 12 months maximum.
• Application audit log: 24 months.

Recipients and subprocessors

Your data may be shared with the subprocessors listed in the Subprocessors section below. Ovalead never sells, rents, or transfers your data to third parties for commercial purposes.

Transfers outside the EU

Some subprocessors (Render, Stripe for certain operations) are based in the United States. Transfers are framed by the European Commission's Standard Contractual Clauses (SCCs) and, for relevant subprocessors, by their certification under the Data Privacy Framework (DPF).

Your rights (GDPR Articles 15 to 22)

You have the following rights:

• Right of access to your data;
• Right of rectification in case of error;
• Right to erasure ("right to be forgotten") under the conditions provided by law;
• Right to restriction of processing;
• Right to portability of your data in a structured format;
• Right to object to processing based on legitimate interest;
• Right to set post-mortem instructions regarding the fate of your data.

Self-service from your account (Settings → My data):

• Export all your data (Articles 15 and 20) → "Download JSON archive" button, file generated instantly, encrypted secrets intentionally redacted.
• Delete your account (Article 17) → "Delete my account" button. Immediate soft-delete, hard-delete 30 days later. Cancellable at any time within that window by email.

By email: for any other request (rectification, objection, restriction, post-mortem instructions) or if you cannot access your account, write to contact@ovalead.com with subject "GDPR". A reply is provided within one month (renewable once in case of complexity).

In case of unresolved disagreement, you may file a complaint with the CNIL (the French Data Protection Authority) — cnil.fr.

Security

Ovalead implements appropriate technical and organizational measures: TLS encryption for transmissions, storage on secure infrastructure (Supabase EU with encryption at rest), JWT authentication, access logging. Passwords are hashed (bcrypt algorithm via Supabase Auth). LinkedIn cookies and third-party OAuth tokens are encrypted at rest using Fernet (AES-128 + HMAC-SHA256).

Data breach notification (GDPR Article 33)

In the event of a personal data breach likely to result in a risk to the rights and freedoms of the data subjects concerned, Ovalead undertakes to:

• Notify the CNIL within 72 hours of becoming aware of it, in accordance with Article 33 of the GDPR;
• Inform affected users without undue delay if the breach is likely to result in a high risk to their rights and freedoms (Article 34 GDPR);
• Document any breach (facts, effects, remedial action) in accordance with GDPR requirements, regardless of the notification obligation.

Policy changes

This policy may be amended to reflect changes in the service or in regulations. Any substantial change will be notified to users by email.

4. Cookie Policy

Ovalead uses a minimal number of cookies, exclusively for the operation of the service. No advertising or behavioral tracking cookies are set.

Strictly necessary cookies (no consent required)

Analytics cookies (subject to consent)

No analytics cookie is currently set. If Ovalead were to integrate a usage analytics tool (e.g. Plausible, which is itself cookieless and GDPR-compliant), this policy would be updated and a consent mechanism would be added if needed.

How to manage cookies

You can delete cookies and Ovalead's localStorage data through your browser's settings. Note that this will sign you out and reset your preferences.

5. List of subprocessors

In accordance with Article 28 of the GDPR, here is the up-to-date list of subprocessors used by Ovalead. Each is bound by a contract (DPA) ensuring compliance with the GDPR.

Notice of changes

Any change to this list of subprocessors will be notified to users by email at least 30 days in advance. Failing a written objection within that period, the change will be deemed accepted.