Privacy policy

In short

• Your projects are saved on your devices. Once synced, they are kept with our hosting provider, in your private space or, if you hold a seat on one of your company’s licences, in the team space shared by the accounts holding a seat on its licences: no other account can access them.
• With a Google, Microsoft or Apple account, we receive your name and e-mail address, with your consent: they identify your account to your company and let us contact you.
• No advertising. The apps’ usage recordings and this website’s audience measurement, with its cookies, happen only with your consent, which you can withdraw at any time.
• To print the boards’ reference strips on a Brady printer, the studio and ES Schémas Mobile use Brady’s software kit, which may send technical data to Brady under Brady’s own rules. Brother’s kit, for P-touch printers, sends nothing to Brother.
• You can delete your account and your synced data at any time, from the app or by writing to us.

Data controller

For any question about your data, or to exercise your rights, write to this address.

The data we process

Your account

Using ES Schémas requires an account, which opens your sync space and your trial. Depending on how you choose to sign in:

• Google or Microsoft: you sign in with Google or Microsoft, in the device’s browser; we never see your password. With your consent, Google or Microsoft send us the technical account identifier, your name and your e-mail address; we keep them and update them at each sign-in. Google confirms to us that the address is verified; the one Microsoft sends is the one your account’s directory holds.
• Apple: you sign in with Apple, in the device’s browser; we never see your password. With your consent, Apple sends us the technical account identifier and your e-mail address (or an Apple relay address, if you choose to hide yours), telling us whether it is verified, and, at the first sign-in only, your name. We keep them; the address is updated at each sign-in. Apple also gives us a token that allows ES Schémas’s access to your Apple Account to be revoked: we keep it encrypted, solely to carry out that revocation when you delete your account.
• E-mail address and password: we keep the address and a hash of the password (PBKDF2-SHA-256 with a unique salt), never the password itself. When you sign up, a six-digit code, valid for 15 minutes, is sent to the address to verify it; only its hash is kept.

For each account, we also keep its creation date, the date of the last sign-in or last session renewal, its sessions (tokens kept as hashes, 16 at most) and the usage counters that enforce the service’s limits.

Your company and its team

The trial and a team’s licences belong to a company. To register it, you enter its enterprise number in “Account” and confirm that you are authorised to represent it. We check this number with VIES, the European Commission’s service that validates VAT numbers, and in the public data of the Crossroads Bank for Enterprises (CBE), which we consult through the cbeapi.be service. We keep the number and the public data read at that moment: names, legal form and legal situation, start date, addresses of the registered office and of the establishment units, activity codes, published phone number and e-mail address. We also keep the identity to print, which you choose from that data and complete with a phone number and an e-mail address, and the company’s contact address, which receives its notices (requests to join the team, end of the trial). The printed identity appears on the plans and dossiers of all the company’s accounts. The number, the name and the registered office address are also used to draw up the invoices for its subscriptions.

To join the team of a company already registered, you give its number and your name. The company’s contact address receives an e-mail with that name and your account’s e-mail address; in “Account” › “Team”, its manager sees the name, e-mail address and sign-in method of each member and of each request. Changes to the company, its team and its licences are recorded in a log.

Your devices

Each installation of ES Schémas and ES Schémas Mobile picks its own random identifier. When it checks its licence, the service records this identifier with the app, the operating system (Windows, macOS, iOS or Android), the app version and, on Windows and Mac, the computer’s network name, along with the dates of its first and last check. This information is used to limit a licence to the number of devices it allows and to show you your account’s devices in “Account” › “Devices”, so that you can remove one.

Education licence

To get it, you send us proof of your electrician course (a certificate of enrolment or apprenticeship contract) or, if you teach one, a certificate from your school or training centre. It is used only to verify your right to the licence; we delete it once the check is done, and keep only your name, your school and the validated school year. Your name and your school are printed on your documents, with the licence’s mark.

Your synced projects

The content of the projects you sync: building, electrical installation, title block information (installer, client, site, meter EAN, signatures, logo), attachments, titles and version history. It is used only to make your projects available on your devices and, in a team space, on those of your team; we do not read it and do not use it for any other purpose.

In a company’s team space, every account holding a seat on one of its licences sees and edits all of the team’s projects. When an account gets a seat, its projects join the team space; when it gives up its seat or leaves the company, the projects stay with the team and are erased from its devices.

These projects often contain your clients’ data. For that data, you, or the company whose team space holds them, remain the controller and we act as processor: we host it on your behalf, according to your instructions, and erase what your private space holds when you delete your account. A project moved to the trash can still be restored, and is therefore kept; deleted permanently from the trash, it is erased from the service with all its versions, and from your other devices at their next sync.

Technical data

• IP address: needed to respond to you; it is also used to limit excessive requests. During a sign-in with Google, Microsoft or Apple, the address (for IPv6, its network prefix) is kept with the pending request, for 10 minutes at most. The service does not record it anywhere else.
• Service logs: for each error, and for a sample of other rejected requests, the route (identifiers masked), the method, the response code and the error class. Never a token, a sign-in code, an address parameter or any project content.
• Crash reports: when an app meets an unexpected error or closes abruptly, it sends us a report: the error and where it occurred in the code, the app version, the device model and its system, and a random identifier of the installation. Never your IP address, a screenshot or any project content; an error message may occasionally mention a file name. Reports are kept 30 days.
• Usage recordings (only if you agree): on iPad, iPhone and Android, the apps ask at first launch whether they may record how you use them: the screens you visit and where you tap. Every text and image is masked before sending, so neither your clients nor your projects’ content are recorded. Recordings are kept 30 days. You can withdraw your consent at any time, in Help (studio) or in the account screen (ES Schémas Mobile).
• Updates: the apps may ask the service for the latest available version, without sending any identifier.

What stays on your devices

The local database of projects and their versions, your default installer details, your preferences and the session tokens, kept in the device’s secure credential store. The Bluetooth laser distance meter sends its measurements to the app without going through our servers. Room scans (iPhone with LiDAR) are computed on the phone and sent directly to the iPad, over Wi-Fi or Bluetooth; they pass through our servers only if they are imported into a synced project.

Brady label printers

On iPad and Android tablets, the studio prints the reference strip of a board row on a Brady printer, using the software development kit of Brady Worldwide, Inc.; ES Schémas Mobile does the same on iPhone and Android phones. This kit starts only when you open the printing of a strip or the labels of a board. Only then is access to Bluetooth, the local network and location requested, as the kit needs it to find nearby printers. ES Schémas does not read your location, and passes nothing it receives from the kit on to our servers.

The kit itself may send data to Brady. Under the kit’s licence, Brady may collect technical data about the device, the system, the software and the printer, in a form that does not identify you, to provide updates and support and to improve its products. The iOS version of the kit declares to Apple that it collects the device’s precise location, not linked to your identity, for its own functioning; it also contains a transmission of statistics to Google Analytics. This data does not reach us: Brady processes it under its own responsibility, according to its privacy policy.

Brother label printers

The studio and ES Schémas Mobile also print these strips on a Brother P-touch printer, using the software development kit of Brother Industries, Ltd. The kit only starts when you open the printing of a strip or a board’s labels: it lists the printers paired with the device over Bluetooth and looks for those on the local network, reads the tape installed and sends the strip to the printer you choose. It communicates only with the printer and sends no data to Brother or to us; its iOS version declares to Apple that it collects no data. The app keeps the Brother printer used last on the device, to reconnect to it.

This website

If you accept it in the “Audience measurement” banner, this website records your visit with Microsoft Clarity: pages viewed, clicks, scrolling, type of device and browser. Clarity sets cookies for this (_clck, _clsk, kept for one year at most); input fields are masked. Without your consent, nothing is recorded and no cookie is set. Your choice is kept in your browser; you can change it at any time with the “Audience measurement” link at the bottom of every page. Our hosting provider processes your IP address to serve the pages and protect the website. The download links lead to the app stores, which apply their own rules.

Why, and on what basis

Our service providers

Some of these providers are established in the United States or process data there. These transfers are covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses. Brady Worldwide, Inc. is established in the United States; the data its kit sends to it is governed by its own privacy policy.

We do not sell or rent any data, and we do not share it with anyone else, unless required by law.

Retention periods

• Account and synced projects: for as long as the account exists. For each project, every version from the last 30 days, then one per day, 300 at most; the current version is always kept.
• Team space projects: for as long as the company is registered, under the same version rules, even after the account that created them is deleted.
• Sessions: an access expires after 15 minutes and is renewed for up to 30 days without use, and up to 180 days after sign-in. Signing out revokes the session.
• Verification codes and unconfirmed sign-ups: 15 minutes.
• Apple token: replaced at each sign-in with Apple. After the account is deleted, it is revoked with Apple and then erased; if it cannot be revoked, it is erased 30 days after the deletion.
• Devices: a removed device is erased 90 days after its removal at the latest, and so is a device that has not checked its licence for a year; an account’s devices are erased with it.
• Company, licences and licence log: for as long as the company is registered. They remain after the account of its manager or of a member is deleted, without that account’s name and e-mail address.
• Invoices: for the legal retention period of accounting records.
• Service logs: a few days, according to our hosting provider’s retention.
• After the account is deleted: the data is erased immediately, and the file storage is freed within the following hours. Our hosting provider’s technical backups disappear on their own, after 30 days at the latest.

Security

All communications are encrypted (HTTPS). Each account has its private space and each company its team space, reserved for the accounts holding a seat on its licences; no route of the service gives access to another space’s data. Session tokens and codes are kept as hashes, passwords with a salted key derivation algorithm, the Apple token encrypted. On the devices, tokens are kept in the system’s secure credential store.

Your rights

You can access your data, have it rectified or erased, restrict its processing, object to it and receive it in a reusable format. Every project can be exported at any time as a complete .esschema archive, and the account is deleted from the app or on request by e-mail: see how. For any other request, write to contact@electrosmart.be; we reply within one month.

You can also lodge a complaint with the Data Protection Authority, Rue de la Presse 35, 1000 Brussels (dataprotectionauthority.be).

Audience

ES Schémas is intended for electrical professionals, and for the learners and teachers of electrician courses. It is not meant for children under 13.

Changes

We will update this policy if the apps or the service change what they process; the date at the top of the page shows when. In the event of a significant change, we will let you know in the app or by e-mail.