Privacy
Privacy notice
This notice explains how Avalonia handles personal data when you visit ibdesk.com, use IBDesk, manage an account or contact support.
Last updated: 21 September 2026
Who is responsible for your data?
IBDesk is published and operated by Cédric Noel Stephane Tournier, a French sole trader (entrepreneur individuel, EI) trading as Avalonia, registered with the Paris Trade and Companies Register under number 533 501 839. The registered establishment is 50 rue Saint-André des Arts, 75006 Paris, France.
For privacy questions or requests, contact the data controller at contact@avalonia.fr.
What data do we process?
The data depends on the features you use. It can include:
- Website and security data: IP address, request time, pages requested, browser and device headers, and technical or security events. We may use an IP address to estimate your country for regional pricing.
- Account and sign-in data: email address, language, session details and sign-in records. If Google sign-in is enabled and you choose it, we may also receive your name and profile image. Sign-in links expire after 10 minutes; account sessions expire after 30 days unless renewed.
- Desktop installation data: installation identifier, platform, architecture, app and operating-system versions, machine name, optional device label, language, time zone, last-seen time and observed IP address. Installation credentials and device keys are stored as protected hashes, not as the original secret values.
- Licence and trial data: account and installation identifiers, licence and trial status, subscription status, billing currency and dates, and limited hashed signals used to enforce trial limits and protect the service.
- Synced settings: if you enable account sync, IBDesk stores the workspace layout, watchlist, selected instruments, display and audio preferences, and related configuration you choose to sync. IBDesk does not ask for your brokerage password or place orders.
- Billing data: Stripe handles payment information during checkout. IBDesk stores Stripe identifiers and subscription details such as plan, currency, status and billing-period dates; it does not store your full card number or security code.
- Support messages: the email address and information you include when you contact us.
Why do we use it?
We use personal data for these purposes and legal bases:
- To create and secure your account, link installations, provide the trial or subscription, sync settings and respond to service requests. This is necessary to provide the service you request or take steps before entering into a contract.
- To prevent abuse, enforce trial limits, protect accounts and infrastructure, and investigate technical incidents. This is based on our legitimate interests in keeping IBDesk secure and reliable.
- To process payments, maintain business records and comply with legal obligations, including applicable accounting and tax rules.
- If audience analytics are enabled for the website, to understand aggregate page usage and improve the site. The configured Plausible analytics integration does not use advertising cookies or persistent visitor identifiers.
Who receives the data?
Access is limited to Avalonia and people who need the information to operate, support or secure IBDesk. OVHcloud (OVH SAS, 2 rue Kellermann, 59100 Roubaix, France; telephone 1007) hosts the IBDesk application server at its Gravelines site in France. We also use infrastructure providers for the database and network, UseSend to deliver sign-in emails, Stripe to process checkout and subscriptions, and Plausible for audience measurement when that optional integration is enabled.
We do not sell personal data. We may disclose information when required by law or when reasonably necessary to protect users, the service or our legal rights.
Some providers may process data outside the European Economic Area depending on their service configuration. Where an international transfer applies, we use the safeguards required by data-protection law. You can contact us for information about the safeguards relevant to a particular processing activity.
How long do we keep it?
Account, licence, installation and synced-settings data are kept while needed to provide the service and administer your account. You may request account closure or erasure by contacting us. We may retain limited information for longer where required for accounting, legal claims, fraud prevention or service security.
Sign-in links expire after 10 minutes, and account sessions expire after 30 days unless renewed. Browser preferences and watchlists described below remain on your device until you clear them. Security records and trial-abuse signals are kept only for as long as they remain useful for their stated purpose or a legal obligation.
Your rights
Depending on the applicable law, you may ask to access, correct, erase or restrict your personal data, object to certain processing, or receive data you provided in a portable format. Where processing relies on consent, you can withdraw it at any time without affecting earlier processing.
To make a request, email us from the address associated with your account where possible. You may also lodge a complaint with the French data-protection authority, the CNIL. We do not make decisions based solely on automated processing that produce legal or similarly significant effects about you.
Updates to this notice
We may update this notice when IBDesk or its data practices change. The date at the top of the page shows when this version was last revised. If a change materially affects an account holder, we will use an appropriate notice, which may include email or an in-product message.