1. SECURITY & CONFIDENTIALITY

Q: Are my passwords really secure?
A: Yes, absolutely. We use AES-256-GCM encryption, the same standard used by banks and government services. Your passwords are encrypted from your device and remain encrypted on our servers. Even Asfaly cannot read them.

Q: What is end-to-end encryption?
A: End-to-end encryption means that your data is encrypted on your device before being sent to our servers. It remains encrypted during transfer and on our servers. Only your device, with your master password and your 2FA, can decrypt it.

Q: Where are my data hosted?
A: Your data is hosted in Switzerland. Switzerland benefits from strict data protection legislation (Federal Act on Data Protection – FADP) and exceptional political and legal stability.

Q: Can Asfaly read my passwords?
A: No. Thanks to end-to-end encryption, even our technical teams cannot access your passwords in plain text. We are just a secure “vault”, not a reader.

Q: What happens in case of server hacking?
A: Even in case of physical theft of our servers or intrusion into our databases, your passwords would remain unreadable and unusable because they are encrypted with AES-256-GCM. Without your decryption key (master password), the data is unusable.

Q: Why is two-factor authentication (2FA) mandatory?
A: 2FA adds a second layer of security. Even if someone steals your password, they cannot access your account without your phone (which generates the temporary code). This is essential protection for a service that stores your most sensitive access.

Q: What to do if I lose my phone (2FA)?
A: When activating 2FA, we provide you with recovery codes. Keep them in a safe place (printed, in a vault, etc.). They allow you to access your account if you lose your phone.

Q: Can I disable 2FA?
A: No. 2FA is mandatory for all Asfaly accounts, without exception. This is an essential security measure to protect your data.

2. ACCOUNT & ACCESS

Q: How do I create my Asfaly account?
A: Go to https://www.asfaly.com/ and go to the subscription shop. You will receive an email with your credentials and a temporary password. At your first login, you will need to set your master password and activate 2FA.

Q: I forgot my master password. What to do?
A: For security reasons, we cannot recover your master password. If you forget it, you must use your recovery codes (provided when activating 2FA). If you don’t have these codes, your account is unfortunately lost.

Q: How do I change my master password?
A: Go to Settings → Security → Change my master password. Enter your old password, then the new one. Warning: if you forget your new password, you will need to use your recovery codes.

Q: How do I change my email address?
A: Go to Settings → Change my email address. Enter the new address, then confirm via the link you will receive by email.

Q: Can I use Asfaly on multiple devices?
A: Yes. Your Asfaly account is accessible from all your devices (computer, mobile, tablet) with the same credentials. Your data is synchronized in real time.

Q: Is there an Asfaly mobile app?
A: For now, Asfaly is accessible via a responsive website compatible with all mobile browsers.

Q: How do I delete my Asfaly account?
A: Go to Settings → My Personal Data (GDPR) → Delete my account. Enter your password, confirm, and an administrator will validate your request. Warning: this action is irreversible. All your data will be permanently erased within a maximum of 30 days.

3. REFERRAL & OFFERS

Q: How does Asfaly referral work?
A: Each customer has a unique referral link accessible from their customer area. For each friend who subscribes with your link:

  • Your friend pays €12/year
  • You earn 6 months of free subscription
  • You can refer up to 30 godchildren (i.e., 15 years of free subscription)

Q: How do I get my referral link?
A: Log in to your customer area, go to Referral, and copy your unique link. Share it by email, SMS, social media, etc.

Q: When are the free months added to my subscription?
A: The 6 free months are automatically added to your subscription after validation of your godchild’s payment. You will receive a confirmation email.

Q: Can I refer someone who already had an Asfaly account?
A: No. Referral is valid only for new customers (who have never had an Asfaly account before).

Q: What is the 50% beneficiary offer?
A: When a user designates you as a beneficiary for the transmission of their post-mortem data, you receive a 50% discount promo code on your 1st year of subscription.

  • 1st year: €6 (instead of €12)
  • From the 2nd year: €12/year (normal rate)

Q: How do I use my beneficiary promo code?
A: When subscribing, enter the code BENEF-[UNIQUE_CODE] that you received by email. The 50% discount will be automatically applied.

Q: Can I combine referral and beneficiary offer?
A: No. Referral and beneficiary offer are not combinable. However, you can benefit from the beneficiary offer the 1st year, then refer others in subsequent years.

4. SUBSCRIPTION & PAYMENT

Q: What is the Asfaly subscription price?
A: The Asfaly subscription costs €12 per year (i.e., €1/month), payable in one installment.

Q: Is there a commitment?
A: No. The subscription is annual, but you can cancel at any time after the renewal date, without charge or penalties.

Q: How does automatic renewal work?
A: Your subscription is subscribed for 12 months. At the end of this period, it is automatically renewed for 12 additional months, unless you object. You will receive a reminder email between 1 and 3 months before the renewal date.

Q: How do I cancel my subscription?
A: You can cancel at any time:

  • By email: contact@asfaly.com
  • From your customer area: Settings → Delete my account
    Cancellation takes effect immediately (if you request deletion of your account) or at the end of the current period (if you wish to retain access).

Q: Can I get a refund?
A: Right of withdrawal (14 days): You have 14 days after subscription to request a full refund, without justification.
After 14 days: No partial refund is granted for the unused period, except in case of major technical problem.

Q: What payment methods do you accept?
A: We accept bank cards (CB, Visa, Mastercard) via a secure payment provider compliant with PCI-DSS standards.

Q: Will I receive an invoice?
A: Yes. An invoice is automatically sent by email after each payment. The invoice serves as a receipt.

5. FEATURES & USAGE

Q: How many passwords can I store?
A: Unlimited. You can store as many passwords and credentials as you wish.

Q: Can I organize my passwords by categories?
A: Yes. Categories (Social Networks, Emails, E-commerce, Professional, Administrative, Other) are available to organize your passwords.

Q: Can I add notes to my entries?
A: Yes. Each entry can include optional notes (e.g., answers to secret questions, PIN codes, etc.).

Q: Is there a password generator?
A: Yes. Asfaly includes a strong password generator to create secure credentials for your new accounts.

Q: Can I import my passwords from another manager?
A: For now, import is not available.

Q: Can I export my data?
A: Yes. In accordance with GDPR, you can export all your data at any time. Go to Settings → My Personal Data (GDPR) → Request export. You will receive an email with a download link (valid for 6 months).

Q: Does Asfaly work offline?
A: No. Asfaly requires an Internet connection to function. However, your data is encrypted and secured during transfer.

6. POST-MORTEM TRANSMISSION

Q: How do I designate a beneficiary?
A: Go to Beneficiaries → Add a beneficiary. Fill in the information (first name, last name, email, relationship, personalized message) and send the invitation. Your beneficiary will receive an email and must confirm to be valid.

Q: Who can be a beneficiary?
A: Anyone of your choice: spouse, child, friend, notary, etc. You can designate multiple beneficiaries.

Q: Does my beneficiary have access to my account during my lifetime?
A: No. Your beneficiary has no access to your account or your data during your lifetime. They will only be able to access your data after your death, upon validation of an official death certificate.

Q: What happens after my death?
A: Your beneficiary requests access by providing an official death certificate. An Asfaly administrator validates the request, then your beneficiary receives a confirmation email. They then have temporary access (maximum 30 days) to your data.

Q: Can I modify or delete a beneficiary?
A: Yes. You can modify or delete your beneficiaries at any time from your customer area (Beneficiaries → Manage).

Q: Can I define directives for certain data?
A: Yes. You can define post-mortem directives for each entry (transmission, retention, deletion). For example, you can choose to transmit your banking passwords, but delete your social networks.

Q: How long does my beneficiary have access to my data?
A: Access is limited to 30 days maximum. After this period, access is automatically revoked.

Q: Does my beneficiary receive an email from me after my death?
A: No. Asfaly does not send automatic messages after death. However, you can add a personalized message when designating your beneficiary, which they will read when accessing your data.

7. GDPR & PERSONAL DATA

Q: What data do you collect about me?
A: We collect:

  • Your email address
  • Your master password (encrypted, never stored in plain text)
  • Passwords and credentials you store (end-to-end encrypted)
  • Information about your beneficiaries (first name, last name, email)
  • Connection data (IP address, date and time of connection, browser)

Q: How do I exercise my right of access?
A: Go to Settings → My Personal Data (GDPR) → Request export. You will receive an email with a download link (valid for 6 months).

Q: How do I exercise my right to erasure?
A: Go to Settings → My Personal Data (GDPR) → Delete my account. Enter your password, confirm, and an administrator will validate your request. All your data will be permanently erased within a maximum of 30 days.

Q: Are my data sold to third parties?
A: No. We never sell your data to third parties and we never use them for advertising purposes.

Q: Are my data transferred outside the EU?
A: No. All your data is hosted in Switzerland, which benefits from an adequacy decision by the European Commission (level of protection equivalent to the EU).

8. SUPPORT & ASSISTANCE

Q: How do I contact Asfaly support?
A: You can contact us on the SUPPORT page. We respond within 48 hours maximum.

Q: What are your response times?
A: We commit to responding within 48 hours maximum (business days).

Q: Do you offer phone support?
A: For now, only support on the SUPPORT page is available.

Q: Where can I find guides and tutorials?
A: Consult our FAQ (this page) and our blog (https://www.asfaly.com/blog) for guides and tutorials.

Q: I am a beneficiary, how do I access the deceased’s data?
A: Log in to your beneficiary account, go to Transmission → Request access, and upload the official death certificate. An administrator will validate your request within 48-72 hours, then you will receive a confirmation email.

Q: What to do if I don’t receive Asfaly emails?
A: Check your spam folder and contact us on the SUPPORT page.

9. INTERNATIONAL & LANGUAGES

Q: Is Asfaly available in my country?
A: Yes. Asfaly is accessible from all countries in the world. However, support is available in French and English only for now.

Q: Do you offer Asfaly in multiple languages?
A: For now, Asfaly is available in French, English, Italian, German, Dutch and Spanish.

Q: Can I pay in my local currency?
A: Prices are displayed in euros (€). Your bank may apply conversion fees if you pay in another currency.

10. LEGAL & TCS

Q: Where can I find your Terms and Conditions of Sale (TCS)?
A: Consult our complete TCS on https://www.asfaly.com/cgv.

Q: Where can I find your Privacy Policy?
A: Consult our Privacy Policy on https://www.asfaly.com/confidentialite.

Q: Is Asfaly GDPR compliant?
A: Yes. Asfaly is fully compliant with the General Data Protection Regulation (GDPR). You have rights of access, rectification, deletion, and portability over your data.

Q: Is Asfaly compliant with the French law on digital death?
A: Yes. Asfaly respects the law for a Digital Republic (2016) and the Data Protection Act, which recognize the right to post-mortem directives on personal data.

Q: In case of dispute, which mediator to contact?
A: In accordance with the Consumer Code, you can contact the following mediator: PENDING
Digital Mediator
Website:
Email:
Before contacting the mediator, you must first have attempted to resolve the dispute directly with Asfaly (email to contact@asfaly.com).

11. CONTACT & INFORMATION

Q: Who is behind Asfaly?
A: Asfaly is operated by the company Misterindex, based in Chalon-sur-Saône, France.
Address: 65 rue des Lieutenants Chauveau, 71100 Chalon-sur-Saône, France
Email: contact@asfaly.com
SIREN: 422792481

Q: Do you offer offers for businesses?
A: For now, Asfaly is reserved for individuals. We are studying a professional offer for businesses in the future.

Q: Are you hiring?
A: No.

Q: Can I become an Asfaly partner or reseller?
A: For any partnership request, contact us.

12. FREQUENT QUESTIONS

Q: Is Asfaly free?
A: No. Asfaly costs €12/year. However, you can earn free months via referral (6 months/godchild, up to 30 godchildren).

Q: Can I gift an Asfaly subscription?
A: For now, we do not offer gift cards or gifted subscriptions. We are studying this option for the future.

Q: Does Asfaly work with cryptocurrencies?
A: For now, only bank card payment is available.

Q: What happens if Asfaly closes?
A: In case of Asfaly closure, you will receive an email with a deadline to export your data. After this deadline, your data will be permanently deleted.

Q: Can I use Asfaly for my professional accounts?
A: Yes. You can store your professional passwords in Asfaly. However, we recommend not sharing these accesses via the beneficiary system.

Q: Is Asfaly compatible with browsers?
A: Yes. Asfaly works with all modern browsers: Chrome, Firefox, Safari, Edge, Brave, etc.

Q: Is Asfaly compatible with smartphones?
A: Yes. Asfaly is accessible via a responsive website compatible with all smartphones (iPhone, Android).

Q: Does Asfaly store my fingerprints or facial recognition?
A: No. Asfaly does not collect any biometric data. 2FA is done only via an authentication app (Google Authenticator, Microsoft Authenticator, etc.).

Q: Can I change beneficiary after my death?
A: No. Once deceased, you can no longer modify your beneficiaries. That’s why it’s important to update your beneficiaries regularly during your lifetime.

Q: Can my beneficiary refer others in turn?
A: Yes. Once your beneficiary has subscribed (with the 50% code), they can refer others in turn and earn 6 free months per godchild.

Q: Does Asfaly offer a free trial period?
A: For now, we do not offer a free trial period. However, you have a 14-day right of withdrawal to request a full refund.

Q: Can I share my Asfaly account with my family?
A: No. Each Asfaly account is personal and non-transferable. However, you can use the beneficiary system to transmit your accesses to your loved ones after your death.

Q: Is Asfaly NF203 certified or other certification?
A: For now, Asfaly is not NF203 certified. However, we use recognized security standards (AES-256-GCM, 2FA, hosting in Switzerland).

Q: Can I recover my account if I am hacked?
A: If you think your account has been hacked, contact us immediately on the SUPPORT page. We will help you secure your account (password change, revocation of active sessions, etc.).

Q: Does Asfaly send notifications in case of suspicious login?
A: For now, we do not send automatic notifications.

Q: Can I see my login history?
A: For now, login history is not available.

Q: Does Asfaly use cookies?
A: Yes. We use technical cookies strictly necessary for the functioning of the service (authentication, security, language preferences). We do not use advertising cookies or third-party trackers.

Q: Can I disable cookies?
A: You can configure your browser to accept or refuse cookies. However, if you refuse technical cookies, you will not be able to log in to your Asfaly account.

Q: Does Asfaly respect “Do Not Track”?
A: Yes. We do not track your activities outside our platform and we do not sell your data to third parties.

Q: Can I report a bug or suggest a feature?
A: Yes. Send us an email to contact@asfaly.com with your request. We take all user feedback into account to improve Asfaly.

Q: Is Asfaly present on social media?
A: Yes. Follow us on:

Q: Can I become an Asfaly ambassador?
A: Yes. If you wish to actively promote Asfaly, contact us to discuss an ambassador program.

Q: Does Asfaly organize webinars or events?
A: For now, we do not organize public events.

Q: Does Asfaly work with browser extensions?
A: For now, Asfaly does not offer browser extensions.

Q: Can I use Asfaly with a VPN?
A: Yes. You can use Asfaly with a VPN. However, some VPN connections may be blocked for security reasons.

Q: Can I use Asfaly on a public computer?
A: Yes, but with caution. We recommend not using Asfaly on a public or shared computer. If you must do so, make sure to log out completely after use and not save your credentials in the browser.

Q: Does Asfaly keep logs of my activities?
A: Yes. We keep security logs (IP address, date and time of connection, actions performed) to detect fraudulent access and ensure traceability. These logs are kept for 12 months maximum.

Q: Can I request deletion of my logs?
A: No. Security logs are kept for security and legal compliance reasons. You cannot request their deletion before the end of the retention period (12 months).

Q: Does Asfaly use artificial intelligence?
A: No. Asfaly does not use AI to analyze your data. All operations are automated and based on predefined security rules.

Q: Is Asfaly open-source?
A: No. Asfaly is not open-source. However, we use recognized open-source libraries for encryption and security.

Q: Can I audit Asfaly code?
A: No. Asfaly code is proprietary.

Q: Has Asfaly ever had a data breach?
A: No. To date, Asfaly has never suffered a data breach. Thanks to end-to-end encryption, even in case of breach, your data would remain unreadable.

Q: Can I sue Asfaly in case of problem?
A: Yes. In case of dispute, you can contact the consumer mediator (see question 10) or file a complaint with the competent authorities.

Q: Does Asfaly respect copyright?
A: Yes. Asfaly fully respects copyright and intellectual property. Any illegal or infringing content will be deleted.

Q: Can I use Asfaly to store illegal content?
A: No. It is strictly forbidden to use Asfaly to store illegal content (child pornography, terrorism, etc.). Any suspected account will be suspended and reported to authorities.

Q: Does Asfaly report illegal content to authorities?
A: Yes. In accordance with the law, Asfaly reports any illegal content to the competent authorities.

Q: Can I use Asfaly for cyberbullying?
A: No. It is strictly forbidden to use Asfaly for cyberbullying, threats, or any form of violence. Any suspected account will be suspended.

Q: Does Asfaly moderate stored content?
A: No. Thanks to end-to-end encryption, we cannot see your content. However, we respond to judicial requisitions and report any illegal content.

Q: Is Asfaly ISO 27001 compliant?
A: For now, Asfaly is not ISO 27001 certified.

Q: Is Asfaly SOC 2 compliant?
A: For now, Asfaly is not SOC 2 certified.

Q: Is Asfaly Cloud Security Alliance compliant?
A: For now, Asfaly is not a member of the Cloud Security Alliance.

Q: Can I contact Asfaly by postal mail?
A: Yes. You can write to us at:
Asfaly / Misterindex
65 rue des Lieutenants Chauveau
71100 Chalon-sur-Saône
France

Q: Does Asfaly have a phone number?
A: For now, only email support is available.

Q: Is Asfaly open on weekends?
A: Email support is checked every day, but responses are provided within 48 hours maximum (business days).

Q: Does Asfaly close during holidays?
A: Support remains active all year round, but response times may be slightly longer during holiday periods.

Q: Can I visit Asfaly offices?
A: No. For security reasons, we do not receive visitors in our offices.

Q: Does Asfaly recruit interns?
A: No.

Q: Does Asfaly offer internships?
A: No.

Q: Can I donate to Asfaly?
A: No. Asfaly is a commercial company, not an association. However, you can support us by referring friends.

Q: Is Asfaly publicly traded?
A: No. Asfaly is a private company, not publicly traded.

Q: Does Asfaly have investors?
A: For now, Asfaly is self-funded. We are studying fundraising for the future.

Q: Can I invest in Asfaly?
A: No. For now, Asfaly is not opening its capital to external investors.

Q: Is Asfaly acquirable?
A: No. For now, we are not looking for buyers.

Q: Does Asfaly have subsidiaries?
A: No. For now, Asfaly has no subsidiaries.

Q: Does Asfaly plan to establish abroad?
A: Yes. We plan to establish in Europe (Germany, Spain, Italy) and in the United States in the coming years.

Q: Is Asfaly compliant with the American Cloud Act?
A: No. Asfaly is not subject to the American Cloud Act because our servers are in Switzerland, not in the United States.

Q: Is Asfaly compliant with the American FISA?
A: No. Asfaly is not subject to the American FISA because our servers are in Switzerland, not in the United States.

Q: Is Asfaly compliant with the American Patriot Act?
A: No. Asfaly is not subject to the American Patriot Act because our servers are in Switzerland, not in the United States.

Q: Is Asfaly compliant with the Swiss law on data protection?
A: Yes. Asfaly is fully compliant with the Swiss Federal Act on Data Protection (FADP).

Q: Is Asfaly compliant with the French law on data protection?
A: Yes. Asfaly is fully compliant with the French Data Protection Act.

Q: Is Asfaly compliant with the German law on data protection?
A: Yes. Asfaly is fully compliant with the German BDSG (Bundesdatenschutzgesetz).

Q: Is Asfaly compliant with the Spanish law on data protection?
A: Yes. Asfaly is fully compliant with the Spanish LOPDGDD (Ley Orgánica de Protección de Datos Personales y garantía de los derechos digitales).

Q: Is Asfaly compliant with the Italian law on data protection?
A: Yes. Asfaly is fully compliant with the Italian Codice Privacy.

Q: Is Asfaly compliant with the British law on data protection?
A: Yes. Asfaly is fully compliant with the UK GDPR (post-Brexit).

Q: Is Asfaly compliant with the American law on data protection?
A: No. Asfaly is not subject to American data protection laws because our servers are in Switzerland, not in the United States.

Q: Is Asfaly compliant with the Canadian law on data protection?
A: Yes. Asfaly is fully compliant with the Canadian PIPEDA (Personal Information Protection and Electronic Documents Act).

Q: Is Asfaly compliant with the Australian law on data protection?
A: Yes. Asfaly is fully compliant with the Australian Privacy Act 1988.

Q: Is Asfaly compliant with the Luxembourg law on data protection?
A: Yes. Asfaly is fully compliant with the Luxembourg Law on Personal Data Protection.

Q: Is Asfaly compliant with the Belgian law on data protection?
A: Yes. Asfaly is fully compliant with the Belgian Law on Personal Data Protection.

Q: Is Asfaly compliant with the Dutch law on data protection?
A: Yes. Asfaly is fully compliant with the Dutch Personal Data Protection Act.

Q: Is Asfaly compliant with the Irish law on data protection?
A: Yes. Asfaly is fully compliant with the Irish Data Protection Act.