Privacy Policy

1. Controller

The controller is the company identified in the company information block on this page.

No data protection officer has been appointed to date. Rather than publishing an unverified contact, requests relating to personal data are handled through the contact channel published in the legal notice.

2. Categories of data processed

Account and authentication data: email address, authentication events, sessions and language preference.

Profile data: display name, description, languages, availability, country and city, contact details that the professional chooses to publish, photographs and other media.

Commercial data: subscription and plan status, credit consumption records, payment metadata such as the reference, the amount, the status and the date of a transaction.

Compliance data: professional status declaration, acceptance of legal documents with the version and timestamp, and cookie preferences.

Operational data: support and contact messages, reports and moderation decisions, security and audit logs, and technical information such as the IP address, browser and device sent by your connection.

3. Purposes and lawful bases

Operating accounts, publishing profiles and providing the paid services: performance of the contract concluded with you.

Security, fraud prevention, moderation, protection of minors, audit logs and the defence of legal claims: the legitimate interests of the operator and of users, and, where applicable, compliance with a legal obligation.

Invoicing, accounting records and retention of commercial documents: compliance with a legal obligation.

Non-essential cookies and any optional measurement: your consent, which you may withdraw at any time.

4. Public data and private data

Only the content that a professional deliberately publishes on their profile is public: it is visible to visitors and may be indexed by search engines.

Account data, payment metadata, compliance evidence, reports, moderation notes and security logs are never public. They are accessible only to authorised staff and to the processors strictly required to carry out the corresponding purpose.

5. Photographs and media

Photographs published on a profile are public by design. Photographs submitted but not published, and technical variants generated by the platform, remain private.

You can delete your media at any time from your professional area. Deletion removes them from public display; residual technical copies in backups disappear according to the backup rotation of the infrastructure.

6. Verification data

Where a verification procedure requires supporting evidence, that evidence is processed for the sole purpose of the verification, is never published, and is not used for advertising purposes.

The retention period specifically applicable to verification evidence has not yet been formally established on a documented legal basis. Rather than announcing an arbitrary period, this evidence is currently kept only for as long as the verification decision remains active, and this section will be completed once the period has been validated.

7. Payment data

The platform does not collect or store full payment card details. Payments are processed by the seller's payment infrastructure and its payment service providers.

The platform stores only the metadata required to manage the subscription and to keep accounting records: reference, amount, currency, status and date.

8. Assisted and AI features

Some optional features assist professionals with their profile: text suggestions, quality diagnostics, search-optimisation suggestions and photo enhancement. They are triggered only by an explicit action of the professional.

For those features, the content submitted is transmitted to the model provider used by the platform solely to produce the requested result, along with a technical record of the consumption for billing purposes. Suggestions are never published automatically: the professional decides whether to apply them.

9. Recipients and processors

Data is accessible to authorised staff of the operator and to processors acting on its instructions: cloud hosting and database infrastructure, transactional email delivery, payment infrastructure, and the model provider used by the assisted features.

The complete and named list of processors and sub-processors has not yet been formally validated for publication. It is documented internally and this section will be completed once it has been verified. Data is not sold.

10. International transfers

The operator is established in the United States and some of the processors used operate infrastructure outside the European Economic Area. Data may therefore be transferred outside your country.

Such transfers are made on the basis of the transfer mechanisms provided for by the processors used. The specific mechanism applicable to each processor is documented internally and will be stated here once verified.

11. Retention

Account and profile data is kept for as long as the account is open. After closure, published content is withdrawn from public display.

Accounting and invoicing records are kept for the period required by the applicable accounting obligations. Security, audit and moderation logs are kept for as long as necessary for the security and evidential purposes described above. The exact retention period for each category has not yet been arbitrated on a documented legal basis; no arbitrary duration is announced here.

12. Your rights

Subject to the conditions provided by the law applicable to you, you have the right to access your data, to have it rectified or erased, to restrict or object to certain processing, to data portability, and to withdraw your consent at any time where processing is based on consent.

You can exercise most of these rights directly from your professional area, and otherwise through the contact channel published in the legal notice. You also have the right to lodge a complaint with the supervisory authority competent for you.

13. Security

Access to data is protected by authentication, by row-level authorisation rules that isolate each account, by restricted access to administration tools, and by audit logging of sensitive administrative actions.

No system can be presented as absolutely secure. Should an incident affecting your data occur, the operator will act in accordance with the obligations applicable to it.

14. Changes to this policy

This policy may change as the platform evolves. The version number and effective date shown at the top of this page identify the version currently in force.