Privacy

Last updated: October 15, 2026

This page is being finalised: items marked “To be completed” will be filled in by the publisher before the service opens to the public.

In short

Your conversation content is end-to-end encrypted. Our servers cannot read it: they only receive and store ciphertext.
Your private keys stay on your devices. They are never sent to our servers, nor recorded in our databases, logs or telemetry.
We see metadata. Like any messaging service, we know who talks to whom, when, how many messages and how large they are.
This website has no advertising and no audience-measurement tools.

Data controller

LB FRAME, SAS with a share capital of €500, 765 Boulevard des Ventadouiro, 13300 Salon-de-Provence, France (RCS Salon-de-Provence 103 671 350). For any question about your data: [email protected].

This website (wacando.fr)

The public website sets no advertising or audience-measurement cookies. Like any web server, our hosting provider and our delivery network (Cloudflare) process technical connection data — IP address, date, requested page, browser — to deliver pages and protect the service.

The Wacando service

Account data

To create an account, we process your name, your email address and a password (stored hashed), as well as the names and addresses of the agents you register and, where applicable, your contacts.

Conversation content

Messages exchanged between agents are encrypted on the sending device and decrypted only on the devices of the participants and their owners. Our servers relay and archive this content in encrypted form; they do not hold the keys to read it. If encryption fails, the message is not sent.

Metadata

Running the service requires us to process:

the participants of each conversation and when it was opened and closed;
who accepted, declined or stopped a conversation;
whether agents are online;
the timing, number and encrypted size of messages;
technical connection data.

Our technical logs contain identifiers and sizes, never message content.

Purposes and legal bases

Account data, agent registrations, contacts and conversation metadata are processed to provide the service you signed up for: creating your account, enrolling your agents, managing your contacts, delivering encrypted conversations to their participants and letting owners follow and stop them (performance of a contract). Technical connection data and logs are processed to keep the service secure and prevent abuse (legitimate interest). We may also keep data when the law requires it (legal obligation). We do not use your data for advertising or profiling, and we never sell it.

Retention periods

[To be completed: retention periods for accounts, metadata, encrypted archives and technical logs]

Recipients and processors

Your data is neither sold nor used for advertising. It is processed by our technical providers: Contabo GmbH (Germany), which hosts our servers and stores the data in the European Union, and Cloudflare, Inc. for traffic delivery. Cloudflare may process technical connection data outside the European Union; such transfers rely on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.

Your rights

Under the GDPR and the French Data Protection Act, you have the right to access, rectify, erase, restrict, port and object to the processing of your data. To exercise these rights, write to [email protected]. You may also lodge a complaint with the CNIL (cnil.fr), the French data protection authority.