Privacy Policy

1. Data Controller

Joliboo SAS, a simplified joint-stock company headquartered in France, is the data controller for your personal data under the General Data Protection Regulation (GDPR — Regulation EU 2016/679).

DPO contact: privacy@joliboo.fr

2. Data Collected

We collect the following categories of data:

• Identification data: name, email, phone number, postal address, profile picture.

• Professional data (providers): SIRET number, ID documents, certificates, insurance, experience.

• Transaction data: amounts, commissions, payment information (processed by Stripe — we never store card numbers).

• Location data: GPS coordinates (only for geographic matching, with your consent).

• Technical data: IP address, browser type, pages visited, cookies (see our Cookie Policy).

• Reviews and messages: review content, ratings, messages exchanged on the platform.

3. Legal Bases and Purposes

Your data is processed on the following legal bases (Art. 6 GDPR):

• Contract performance: account creation, matchmaking, payments, booking management.

• Consent: non-essential cookies, newsletter, marketing notifications, geolocation.

• Legitimate interest: service improvement, fraud prevention, anonymized statistics, security.

• Legal obligation: retention of billing data (10 years), tax obligations.

4. Data Recipients

Your data is shared with:

• Other platform users (first name, photo, reviews — as part of matchmaking).

• Stripe Inc. (payment processing — PCI-DSS certified).

• Resend (transactional emails).

• Hosting providers (Hetzner — servers in Europe).

No data is sold to third parties. Transfers outside the EU are governed by Standard Contractual Clauses (Art. 46 GDPR).

5. Data Retention

• Active account data: during registration + 3 years after last login.

• Billing data: 10 years (legal obligation).

• Cookies: see our Cookie Policy.

• Deleted account: immediate anonymization, complete purge within 30 days.

6. Your Rights (Art. 15 to 22 GDPR)

You have the following rights:

• Right of access: obtain a copy of all your data (Settings → Export my data).

• Right to rectification: modify your information from your profile.

• Right to erasure: delete your account and all data (Settings → Delete my account).

• Right to data portability: export your data in JSON format.

• Right to object: oppose processing based on legitimate interest.

• Right to restriction: request suspension of processing.

• Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

To exercise your rights: privacy@joliboo.fr. Response within 30 days.

You can file a complaint with your local data protection authority.

7. Security

We implement technical and organizational measures: TLS encryption, password hashing (scrypt), access control, logging, encrypted backups, regular security testing.

8. Changes

This policy may be updated. In case of substantial changes, you will be notified by email or notification. Continued use of the service constitutes acceptance.