Last updated: 04/09/2026
1. Data controller
The controller of the personal data collected on Hora is:
BHD
2 Square Josquin des Prés
95320 Saint-Leu-la-Forêt, France
Email: contact@hora-crm.io
2. Data we collect
When you use Hora, we collect:
- Identification data: first name, last name, email address, phone number
- Business data: company name, trade, business address
- Usage data: sign-in logs, pages visited, actions performed
- Payment data: handled exclusively by Stripe, our PCI-DSS certified payment provider
3. Google Calendar data
If you enable the Google Calendar integration:
- Hora writes the events created in the CRM to your calendar, and updates or deletes them when they change.
- Hora reads the day's events to display them inside the CRM; they are not stored on our servers.
- We request only the “calendar.events” permission, which is limited to events. Hora cannot create, delete or share your calendars, and accesses no other data in your Google account.
- We keep only the link between each CRM event and its Google identifier, together with the access tokens needed for synchronisation. Exchanges with Google use HTTPS.
- This information is kept for as long as the integration remains active. As soon as you turn it off in Hora, or revoke access from your Google account, the tokens are deleted from our servers and synchronisation stops.
- Data from your calendar is used only to display your schedule inside Hora and to synchronise your bookings. It is never used for advertising, never sold, never passed to third parties, and never used to train artificial-intelligence models.
We never share your Google data with third parties. You may revoke access at any time from your Google account settings.
Hora's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. Legal basis for processing
The processing of your data is based on:
- Performance of the contract (providing the Hora service)
- Your consent (Google Calendar integration, newsletters)
- Our legitimate interest (improving the service, anonymised statistics)
5. Retention period
Your data is kept for the duration of your subscription and for 12 months after your account is deleted, unless a legal obligation requires otherwise.
6. Your rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access : obtain a copy of your personal data
- Right to rectification : correct inaccurate data
- Right to erasure : request the deletion of your data
- Right to portability : receive your data in a structured format
- Right to object : object to the processing of your data
To exercise these rights, contact us at contact@hora-crm.io.
7. Data security
We implement appropriate technical and organisational measures: SSL/TLS encryption, daily backups, restricted access and continuous monitoring.
8. Contact
For any question regarding the protection of your data:
Email: contact@hora-crm.io
Post: BHD – 2 Square Josquin des Prés, 95320 Saint-Leu-la-Forêt