· 2026-10-27.1
1. Parties and service
Watchr is operated by Boris Rieunier, sole proprietor, identified in the legal notice. The customer is the business professional who creates an account. Watchr provides monitoring, analysis and reports and, where enabled, assistant access through MCP.
2. Account and use
The account creator manages users and their access rights. The customer is responsible for the sources, brands, goals and recipients it configures and for having the rights needed to process them. Users must protect their access and report suspicious use to contact@watchr.ai.
The service has no minimum commitment period. The features, limits, prices and payment terms that apply are shown before purchase of a paid plan. External sources and automated analyses may be incomplete or inaccurate; customers should check results before important decisions.
3. Data and end of service
The privacy policy describes Watchr's own processing, including accounts, billing, security and usage measurement. The annex below applies to personal data processed on the customer's behalf for its monitoring. Requests to close an account, return data or delete data may be sent to contact@watchr.ai. Data that must be kept by law remains subject to that duty.
Annex: processing of customer data (DPA)
The customer determines the purposes and essential means of its monitoring and acts as controller. Boris Rieunier EI acts as processor to provide that monitoring under these terms, the account settings and agreed written instructions. This annex applies during service provision and end-of-service operations.
Processing includes collection of requested sources, page monitoring, insight qualification, AI analysis, report production and delivery, and MCP access. It may involve account users, people mentioned in sources and report recipients. Data may include contact details, public pages and profiles, monitoring settings, insights, excerpts, analyses and reports.
Instructions, security and confidentiality
Watchr processes customer data only on documented instructions unless required by law, and informs the customer if an instruction appears to breach the GDPR unless legally prohibited. Access is limited to authorized people bound by confidentiality. Watchr applies safeguards appropriate to the risk, including access controls, account separation, protection of communications and backups.
Subprocessors and transfers
The customer gives general authorization for the providers in the list linked below for the activities described there. Watchr emails the account contact at least 15 days before any addition or replacement affecting customer data, identifying the provider and its role. The customer may object by email during that period. Watchr reviews the objection before entrusting data to the new provider; if no solution is found, the customer may close its account without a termination fee. Watchr binds these providers to equivalent protection duties and remains responsible for their services under GDPR Article 28.
Processing outside the European Economic Area may occur depending on providers and service settings. Watchr applies the required transfer mechanisms when needed. Customers can request the applicable information and safeguards at contact@watchr.ai before signing up.
Assistance, incidents and end of processing
Watchr assists the customer, using the information available to it, with rights requests, risk assessment, breach documentation and security duties. It informs the customer without undue delay when it becomes aware of a personal data breach affecting customer data.
At the end of the service, Watchr returns or deletes data processed on the customer's behalf at the customer's choice, subject to legal retention duties. Backup copies are removed on their documented cycle. Watchr makes available information needed to demonstrate compliance with this annex and enable the checks required by Article 28, while protecting other customers.
Requests and records
Requests for access, return, correction or deletion may be sent to contact@watchr.ai. Watchr checks the requester's authority, handles the request manually within the applicable legal time limit and keeps a private record of the actions taken and providers contacted. The customer is informed of any legally required retention exception.