Last updated: 4 July 2026.
Diamontis Informatique, the publisher of Diamontis FX, pays close attention to protecting your personal data. This policy explains what data we process, why, for how long, and what your rights are.
Diamontis Informatique acts as data controller for data related to your account and subscription, and as data processor for data appearing on the client company's invoices (for which the client company remains the controller).
Data Protection Officer (DPO) / point of contact: dpo@diamontis.fr.
Full name, e-mail, password (hashed), two-factor authentication secret, roles, last login date. Purpose: account creation and security, authentication, support.
Your phone number is collected so that we can contact you as part of using the service: operational messages (incidents, sensitive operations), notifications related to your invoices, account information, support and, where relevant, fraud prevention at sign-up. It is never shared with third parties for commercial purposes, nor used for marketing.
SIREN, company name, address. Purpose: linking the user to the company, compliance with the e-invoicing reform.
Plan, billing period, status, due date, Stripe identifiers (customer/subscription). Purpose: managing the subscription lifecycle. No card data is stored by Diamontis FX.
Company names, SIREN numbers, amounts, descriptions and any contacts appearing on invoices received or issued on the client's behalf. Purpose defined by the client (controller of this processing) and legal e-invoicing obligation.
Scope of consent, IP address, user agent, timestamp. Purpose: evidence of the mandate granted to the Dematerialisation Operator.
User identifier, action, timestamp, technical metadata. Purpose: traceability and security.
Depending on the processing: performance of the contract (account creation, subscription, mandate), legal obligation (tax retention, e-invoicing) and legitimate interest (security, evidence, fraud prevention).
Your data may be shared with the following recipients, strictly within the scope of their respective missions:
Invoices: 10 years (tax obligation), including after termination - this period takes precedence over any erasure request.
Account and subscription: for the duration of the relationship, then purged after termination in accordance with applicable legal deadlines.
Technical logs: 12 rolling months, except in the event of a security incident requiring extended retention for evidence purposes.
You have a right of access, rectification, erasure (within the limit of the 10-year tax retention obligation, which takes precedence), restriction, portability and objection over your data.
For data processed as a processor (invoice data), your request is forwarded to the client company acting as controller.
To exercise your rights, contact us at dpo@diamontis.fr or by post at DIAMONTIS INFORMATIQUE, 10 rue Louise Michel, 57300 Hagondange, France.
You have the right to lodge a complaint with the French data protection authority (CNIL), 3 Place de Fontenoy, 75007 Paris - www.cnil.fr, if you consider that the processing of your data constitutes a breach of the GDPR.
Hashed passwords, available two-factor authentication, rate limiting on login and sign-up attempts, encryption of integration secrets for partner platforms, strict data isolation between client companies.
Diamontis FX only uses technical cookies strictly necessary for the service to work (application session, cross-site request forgery protection, language choice). No audience measurement or advertising cookie is set at this time.
Our payment provider, Stripe, may involve data transfers to the United States, governed by standard contractual clauses. Our other processors (SuperPDP, hosting provider, e-mail service) are located within the European Union.
This policy may change; the version in force is the one published on this page, as of the update date shown at the top of the document.