These terms of use (“Terms”) govern access to and use of the ORILA site and application, published by C2SL (SAS with a share capital of 100 €, 6 rue Soutrane, 06560 Valbonne, RCS Grasse 892 281 510). By accessing the service, you accept these Terms without reservation.
1. Purpose
The Terms define the conditions under which the User accesses and uses the Service. ORILA is an online customer relationship management (CRM) software, multi-sector and multilingual, intended for professional use.
2. Definitions
- Publisher: the company C2SL.
- Service: the orila.co site and the ORILA application.
- User: any person accessing the Service in the course of their professional activity.
- Account: the personal space allowing access to the features.
- Content: the data entered by the User in the Service.
3. Access to the Service
A demonstration can be viewed online without registration. Full access requires the creation of an Account. The Service is intended for professionals acting in the course of their activity. The User is responsible for the confidentiality of their credentials and for any action carried out from their Account.
4. Description of the Service
ORILA notably allows you to manage a portfolio of clients and contacts, tasks, a calendar and appointments, email campaigns, statistics, as well as teamwork (roles, history). The Service comes preconfigured according to the chosen sector of activity. Features may evolve over time.
Internal messaging. The Service's messaging is not an archiving tool: each organisation sets its own retention rules, including how long a User may delete their own messages (always, one hour, twenty-four hours, seven days or never). A deleted message is erased for all participants; only the notice “Message deleted” remains in its place, and the author and date of the deletion are kept. It cannot be restored from the Service, and C2SL does not restore it on request. Files attached to the message are moved to the organisation's trash, then permanently erased after seven days. Deleted content may remain in the Service's backups, which are kept solely to restore the Service after an incident and are erased according to their rotation cycle. Clearing a conversation only removes it from the list of the User who clears it; the other participants keep it.
5. User obligations
The User undertakes to:
- use the Service in a fair, lawful manner and in accordance with its intended purpose;
- not impair the operation, integrity or security of the Service;
- not attempt to access data that does not belong to them;
- not carry out any reverse engineering, extraction or unauthorized copying;
- only process, via the Service, data that they are entitled to process, in compliance with the GDPR.
6. Intellectual property
The Service, its trademark, its interface, its texts, its visuals and its code remain the exclusive property of C2SL. These Terms confer no ownership right over the Service. The User retains full ownership of the Content they enter; they grant C2SL the license strictly necessary for hosting and operating the Service.
7. Personal data
The processing of personal data is described in the privacy policy. The User has the rights of access, rectification, erasure, restriction, objection and portability provided for by the GDPR.
8. Liability and availability
C2SL implements reasonable means to ensure the continuity and security of the Service, without guaranteeing uninterrupted availability. The Service may be suspended for maintenance. C2SL's liability cannot be engaged in the event of force majeure, misuse of the Service, or for indirect damages.
9. Modification of the Terms
C2SL may modify these Terms. The applicable version is the one online at the time of use; continued use of the Service after modification constitutes acceptance.
10. Suspension and termination
The User may close their Account at any time. C2SL may suspend or close an Account in the event of a breach of these Terms. Upon closure, the User may export their Content; the data then remains retrievable for thirty days and is deleted afterwards, under the conditions described in the article "Data, reversibility and backup" of the terms of sale.
Automatic security measures. To protect the Service and its users' data, the Service automatically detects certain abuse attempts and responds with the graduated measures described below. These measures only affect the Account of the person concerned and the access keys they created, never their whole organization; during a restriction or a suspension, an integration that uses one of those keys is subject to the same measure. They are always temporary: they entail neither the closure of the Account nor the deletion of its Content.
Only the following attempts give rise to these automatic measures:
- inserting, into an input field such as a name, unambiguously executable code, such as a script tag or an instruction triggered by an event;
- sending more than twenty member invitations within one hour.
The measures apply as follows:
- inserting executable code leads to the immediate suspension of the Account;
- for sending invitations, the first attempt gives rise to a warning message; the second makes the following sensitive actions of the Account unavailable for twenty-four hours: inviting members, exporting data (including the full backup of the organization and the export of inbox messages linked to an address), creating an access key and sending a campaign; the third leads to the suspension of the Account;
- each new suspension lasts longer than the previous one: twenty-four hours the first time, one week the second, thirty days the third; beyond that, each suspension lasts thirty days and C2SL, which sees the suspensions in progress, may lift it before it ends;
- the count of attempts and suspensions is reset to zero after ninety days without a new attempt included in that count.
The following attempts are only recorded, and an alert may be sent to C2SL about them; they give rise to no automatic measure (no warning, no restriction, no suspension) and are not included in the count of attempts:
- attempting to access the data of an organization of which the person is not a member;
- inserting code by means of an access key;
- inserting code that already appears, exactly as it is, in the data the organization has received, such as a person's registration for one of its events or a document received, when that value is reused to create a record;
- inserting code into the name entered when signing up for the Service, before the email address is confirmed, including when that name still contains that code at the time of that confirmation (accepting an invitation, which confirms the address, is not covered).
Content entered is never refused or deleted: it is recorded as is and displayed without being executed.
Repeated attempts to log in with a wrong password are also detected. They lead to a temporary block of login attempts made with the same identifier from the same network address, whose duration increases with each repetition without exceeding fifteen minutes; when, from the same network address, logins fail on more than twenty different accounts within one hour, all logins from that address are blocked for fifteen minutes, which may affect everyone who logs in from that address. The block is shown by a message stating how long to wait. On their own, these attempts never lead to the suspension of the targeted Account.
Repeated use of a refused access key is also detected and recorded; an alert may be sent to C2SL if it happens again within ninety days. The key remains refused; no network address is blocked and no Account is suspended.
Information and remedies. Each warning, restriction or suspension is notified to the person concerned when it applies, by a message stating its reason, its duration where applicable, the fact that it was decided automatically, and this article. During a suspension, the screen shown to the person indicates the date on which the Account will reopen and the address to write to. The person concerned may at any time submit their observations, contest the measure and ask for it to be reviewed by a person at C2SL, by writing to [email protected]. C2SL replies as soon as possible and may lift a measure at any time. Lifting a measure leaves the count of attempts unchanged, unless C2SL finds that the measure resulted from an error: the last attempt that gave rise to a warning, a restriction or a suspension then ceases to be counted. This remedy does not deprive the person concerned of the right to bring the matter before the competent court under the conditions of article 12. Traces of these attempts are kept for ninety days, under the conditions described in the privacy policy.
11. Financial terms
Offers, prices and subscription terms are governed by the terms of sale.
12. Applicable law and disputes
These Terms are governed by French law. In the event of a dispute, an amicable solution will be sought as a priority. Failing that, jurisdiction is granted to the courts of the registered office of C2SL.
13. Contact
For any question: [email protected].