Confidentiality and data processing agreement
Between the Client, identified in the signed version (the “Client”), and 🤝 Handcheck, represented by Henri Casalis and Gauthier Nadaud, Paris.
1. Purpose
The Client wishes to have its address book and related files rebuilt and enriched (the “Mission”). This agreement sets out how 🤝 Handcheck keeps confidential everything it receives or produces for the Mission, and how it processes the personal data it contains.
2. Confidential information
“Confidential Information” means, whatever its form:
- the Client’s contacts, files, LinkedIn archive, lists and notes;
- everything produced from them during the Mission, including the deliverables;
- the identity of the Client and the fact that a Mission exists.
It does not include information that was public before disclosure, other than through a breach of this agreement.
3. Our obligations
- Use the Confidential Information only for the Mission.
- Disclose it to no one. Only Henri Casalis and Gauthier Nadaud have access to it; no employee, freelancer or intern is involved.
- Keep the Client’s files in an encrypted working folder that only the two of them can open. Files are received through an encrypted link, never by email.
- Never reuse any contact, file or finding for another client or for our own prospecting.
- Never name the Client, nor describe the Mission in a way that could identify it, without the Client’s prior written consent.
4. What leaves the address book
To identify a contact, only the following may be sent to the search and AI tools listed in clause 6: a name, a company, a job title and a city. Never a phone number, an email address, a postal address or a note.
Only professional, public facts are recorded about a contact. Nothing on wealth, health, religion, political opinion or legal matters. Family is recorded only where it explains a position in business. Any person the Client designates is excluded from all searches.
5. Personal data (GDPR)
For the personal data in the Client’s files, the Client is the controller and 🤝 Handcheck the processor, within the meaning of Article 28 of the General Data Protection Regulation. 🤝 Handcheck:
- processes the data only on the Client’s documented instructions, as described in this agreement;
- keeps it confidential and secured with appropriate technical and organisational measures;
- helps the Client answer any request from a data subject;
- notifies the Client of any personal data breach within 48 hours of becoming aware of it;
- makes available the information needed to show compliance with these obligations.
6. Tools we use
The Client authorises the following providers, which only ever receive the data listed in clause 4: Anthropic (Claude, AI assistant), Exa (reading public web pages), TypeSafe (classification of records) and Apollo (professional database). Floot hosts our website and the private upload page: it only ever stores files encrypted in the Client’s browser, which it cannot read. Any new provider is submitted to the Client beforehand, and the Client may refuse it.
7. Deletion
Within 30 days of the final delivery, 🤝 Handcheck deletes all Confidential Information and every copy of it, including working files, and sends the Client a dated certificate of deletion. Only this agreement, the quote and the invoice are kept, as required by law.
8. Duration
This agreement takes effect on signature. The confidentiality obligations last for five years after the end of the Mission; the obligation not to disclose the Client’s identity has no time limit.
9. No other rights
Nothing in this agreement grants 🤝 Handcheck any right over the Confidential Information. The deliverables belong to the Client.
10. Law and courts
This agreement is governed by French law. Any dispute that cannot be settled amicably is brought before the competent courts of Paris.