Privacy policy
Last updated: 3 November 2026
Courtesy translation. This English version is provided for convenience only. The French version is the only legally binding one and prevails in case of any difference.
In short
Without Notion, your prospects, products and quotes stay on your device and are not sent to us. If you connect Notion, they are saved in your workspace and Bao CRM only keeps what is needed to sign you in and access your databases. If you subscribe to the Pro plan, payment is processed by Stripe: we never receive your bank details. There is no advertising, no audience tracking and no sale of data.
Controller
Maxence Hoarau, sole trader, trading name SOBARY, 229 rue Saint-Honoré, 75001 Paris, France. Contact for your personal data: contact@baocrm.com. No data protection officer has been appointed.
Data we keep
Account data, tokens and the session only exist if you connect Notion. Subscription data only exists if you open the Pro plan payment.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, Notion ID, workspace name and ID, database IDs | Create and manage your account | Performance of the contract | Until the account is deleted |
| Notion access tokens, encrypted | Access your databases at your request | Performance of the contract | Until the account is deleted |
| Sign-in session, kept as a hash | Keep you signed in | Performance of the contract | 30 days at most |
| Stripe customer and subscription IDs, status, period end date, cancellation requested | Manage your Pro subscription | Performance of the contract | Until the account is deleted |
| Accounting records relating to your payments | Meet our accounting obligations | Legal obligation | 10 years |
| Technical logs: IP address, date, page requested, browser | Security and incident resolution | Legitimate interest | Limited period, set by the hosting provider |
| Exchanges with support | Answer your requests | Legitimate interest | 3 years after the last exchange |
Data stored on your device
Without a Notion connection, prospects, products, quotes and business details are saved in your device’s browser. They are not sent to our servers and we have no access to them. Clearing the browser data deletes them: you can download a backup in Settings. For your own contacts’ data, you are the controller.
Data stored in your Notion, if you connect it
Prospects, products, quotes and business details are then saved in your Notion workspace. Bao CRM reads and changes them at your request, without keeping a lasting copy on its servers. For your own contacts’ data, you are the controller and Bao CRM acts as a processor, under the terms of use.
Bao CRM only accesses the pages shared when you authorize it in Notion. You can change this access from Notion.
Recipients
- O2switch (France): hosting of the website and the app.
- Stripe Payments Europe, Ltd. (Ireland), if you subscribe to the Pro plan: payment, invoicing and subscription management. Stripe receives your name, then your email address, your billing address and your payment details, which you enter on its secure page. Stripe processes them under its own privacy policy and may transfer them outside the European Union with the safeguards provided by the GDPR.
- Notion Labs, Inc. (United States), if you connect it: the service in which your data is stored, under your own contract with Notion. Notion states that it covers these transfers with the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses.
Company directory (optional). If you use the company search, the name or SIRET number you enter is sent directly from your browser to the French public service “Annuaire des entreprises” run by DINUM, which also receives your IP address. This information does not go through our servers.
Your data is neither sold nor transferred for commercial purposes.
Cookies and local storage
baocrm.com sets no cookies, and its fonts are hosted on our servers. It only remembers, on your device, that you closed the offer to read the site in English. In the app, only items essential to the service are used. They do not require consent. The payment page is served by Stripe, which applies its own cookies there.
| Name | Role | Retention |
|---|---|---|
| prospera_session | Keep you signed in | 30 days |
| prospera_oauth_state | Secure the connection to Notion | 10 minutes |
| bao_notion_lang | Create your Notion databases in the chosen language | 10 minutes |
| bao-crm | Save your data on your device, without Notion | Until erased |
| bao.notion | Remember that a Notion account is connected, on your device | Until sign-out |
| bao.lang | Remember the interface language, on your device | Until erased |
| bao.site.lang | Stop offering the English version of the website, on your device | Until erased |
| prospera.nc | Remember the menu state, on your device | Until erased |
| App cache | Display the interface, with no data | Until erased |
Browser extension
The extension only activates when you click its icon or its menu. The address and title of the open page are then used to prefill a form. They are only saved if you submit that form.
Security
The website and the app are served exclusively over HTTPS. Notion tokens are encrypted on the server. Each account’s data is isolated and only accessible with its own token. Bao CRM stores no passwords.
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to set instructions about what happens to your data after your death. You can delete your account at any time in Settings. This erases your account data and revokes access to Notion, but does not delete what is in your Notion workspace. Data saved on your device is erased from your browser. It also cancels your Pro subscription. Accounting records are kept for the legal period.
To exercise your rights: contact@baocrm.com. We answer within one month at most. You can also lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or on cnil.fr.
Changes
This policy may change. The date of the last update is shown at the top of the page. In case of a significant change, we will let you know in the app.