Privacy

Privacy statement

Updated 20 August 2026

This statement describes how Viculus (a French SASU) processes personal data on this instance — including production (viculus.fr) and local development (localhost). It is not a data-processing agreement with a municipality.

Viculus is a map of the territory for municipalities of fewer than 500 inhabitants. The publisher is Viculus, a French SASU.

For questions about this statement, use the form on the public home page. We will reply to the email you give there.

The public site (home, this privacy page, the terms page) collects contact details when you sign up or request a demo.

The private application (/app) is for municipal staff. Sign-in uses Microsoft (Entra ID / OpenID Connect) or a one-time e-mail link.

Data that a municipality enters or imports about its territory is processed on behalf of that municipality. The municipality is the controller; Viculus is the processor. A written contract is required before that processing.

When you send the form we keep: municipality (name, INSEE code, population), your role, your name, your email, and an optional message. We use this to come back to you and to assess whether the municipality is in our audience.

Legal basis: pre-contractual steps and our legitimate interest in answering a request from a municipality.

We keep these requests as long as needed to handle them, then for a limited archive (up to three years) unless a longer period is required by law.

Microsoft sign-in: we receive an authorization code, then a session. We store a signed httpOnly SameSite=Strict cookie (viculus_app) on your device. JavaScript cannot read it. We do not receive your Microsoft password.

E-mail sign-in link: we send a one-time URL (15 minutes) to the address you give. We do not store a password. The raw link is never kept; only a hash is stored until it expires or is used.

Legal basis: legitimate interest in securing the private application, and the municipality’s instructions once a contract exists.

The session stays valid for eight hours of activity (or until you log out). A first-party httpOnly cookie may last longer so we can renew the session server-side with an encrypted refresh token; it is not used for advertising.

Open data (BAN addresses, cadastre, administrative boundaries, map tiles) is public-sector or OSM data. We display it; we do not sell the raw datasets. Sources are credited (open licence / ODbL).

Personal data of inhabitants that a municipality records (name, contact details, date of birth, and related fields) is the municipality’s responsibility as controller. Viculus hosts and processes it only as a processor, in France, for that municipality’s public-interest mission.

Those personal fields are encrypted at rest in the database (AES-256-GCM) before storage. They are decrypted only in the application for authorised users of that municipality.

Application and database hosting is in France (Paris, eu-west-3). We do not intend to transfer personal data outside the European Union.

Sales-form fields (name, email, role, message) and account identifiers used for sign-in are also encrypted at rest in the same way.

Microsoft sign-in is provided by Microsoft. Their processing is described in Microsoft’s own privacy statement. We only use the result to open a Viculus session. When Microsoft issues a refresh token, we store it encrypted server-side.

Sign-in e-mails are sent with Brevo (a French processor) when that service is configured.

You may ask for access, rectification, erasure, restriction, objection, or portability, within the limits of the GDPR.

For sales-form data, write to us via the home page form. For municipal data, contact the municipality (the controller). You may also lodge a complaint with the CNIL (cnil.fr).

The public site does not use advertising or analytics cookies.

The private app sets a session cookie after sign-in. Language follows the URL (/ vs /en), not a cookie.

We may update this statement when the product or the law changes. The date at the top is the current version.