Privacy policy

In short

• Your projects are saved on your devices. Once synced, they are kept in your private space with our hosting provider: no other account can access them.
• With a Google or Microsoft account, we receive your name and e-mail address, with your consent: they identify your account to your company and let us contact you.
• No advertising, no trackers, no audience measurement: not in the apps, and not on this website, which sets no cookies.
• You can delete your account and your synced data at any time, from the app.

Data controller

For any question about your data, or to exercise your rights, write to this address.

The data we process

Your account

Using ES Schémas requires an account, which opens your sync space and your trial. Depending on how you choose to sign in:

• Google or Microsoft: you sign in with Google or Microsoft, in the device’s browser; we never see your password. With your consent, Google or Microsoft send us the technical account identifier, your name and your e-mail address; we keep them and update them at each sign-in. Google confirms to us that the address is verified; the one Microsoft sends is the one your account’s directory holds.
• E-mail address and password: we keep the address and a hash of the password (PBKDF2-SHA-256 with a unique salt), never the password itself. When you sign up, a six-digit code, valid for 15 minutes, is sent to the address to verify it; only its hash is kept.

If you join a company’s team in ES Schémas, its manager sees your name and e-mail address.

For each account, we also keep its creation date, the date of the last sign-in or last session renewal, its sessions (tokens kept as hashes, 16 at most) and the usage counters that enforce the service’s limits.

Student access

To activate free access, you send us proof of enrolment (a student card or certificate of enrolment). It is used only to verify your student status; we delete it once the check is done, and keep only the validated school year.

Your synced projects

The content of the projects you sync: building, electrical installation, title block information (installer, client, site, meter EAN, signatures, logo), attachments, titles and version history. It is used only to make your projects available on your devices; we do not read it and do not use it for any other purpose.

These projects often contain your clients’ data. For that data, you remain the controller and we act as processor: we host it on your behalf, according to your instructions, and erase it when you delete your account. A project moved to the trash can still be restored, and is therefore kept.

Technical data

• IP address: needed to respond to you; it is also used to limit excessive requests. During a sign-in with Google or Microsoft, the address (for IPv6, its network prefix) is kept with the pending request, for 10 minutes at most. The service does not record it anywhere else.
• Service logs: for each error, and for a sample of other rejected requests, the route (identifiers masked), the method, the response code and the error class. Never a token, a sign-in code, an address parameter or any project content.
• Updates: the apps may ask the service for the latest available version, without sending any identifier.

What stays on your devices

The local database of projects and their versions, your default installer details, your preferences and the session tokens, kept in the device’s secure credential store. The Bluetooth laser distance meter sends its measurements to the app without going through our servers. Room scans (iPhone with LiDAR) are computed on the phone and sent directly to the iPad, over Wi-Fi or Bluetooth; they pass through our servers only if they are imported into a synced project.

This website

This website sets no cookies and uses no audience measurement tool. Our hosting provider processes your IP address to serve the pages and protect the website. The download links lead to the app stores, which apply their own rules.

Why, and on what basis

Our service providers

Some of these providers are established in the United States or process data there. These transfers are covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.

We do not sell or rent any data, and we do not share it with anyone else, unless required by law.

Retention periods

• Account and synced projects: for as long as the account exists. For each project, every version from the last 30 days, then one per day, 300 at most; the current version is always kept.
• Sessions: an access expires after 15 minutes and is renewed for up to 30 days without use, and up to 180 days after sign-in. Signing out revokes the session.
• Verification codes and unconfirmed sign-ups: 15 minutes.
• Service logs: a few days, according to our hosting provider’s retention.
• After the account is deleted: the data is erased immediately, and the file storage is freed within the following hours. Our hosting provider’s technical backups disappear on their own, after 30 days at the latest.

Security

All communications are encrypted (HTTPS). Each account has its own space, and no route of the service gives access to another account’s data. Session tokens and codes are kept as hashes, passwords with a salted key derivation algorithm. On the devices, tokens are kept in the system’s secure credential store.

Your rights

You can access your data, have it rectified or erased, restrict its processing, object to it and receive it in a reusable format. Every project can be exported at any time as a complete .esschema archive, and the account is deleted from the app: see how. For any other request, write to contact@electrosmart.be; we reply within one month.

You can also lodge a complaint with the Data Protection Authority, Rue de la Presse 35, 1000 Brussels (dataprotectionauthority.be).

Audience

ES Schémas is intended for electrical professionals and is not meant for children.

Changes

We will update this policy if the apps or the service change what they process; the date at the top of the page shows when. In the event of a significant change, we will let you know in the app or by e-mail.