Privacy Policy

This policy explains how Kinga Corporation SASU (Société par actions simplifiée unipersonnelle (SASU)) processes personal data when you use ClocheVerse. For the purposes of the EU General Data Protection Regulation (GDPR) and French data protection law, Kinga Corporation SASU is the controller for the processing described here.

1. Data we collect

• Account and business data: name, contact name, company name, business type and role, country and city, email address, phone number, password (stored hashed by our authentication provider), profile photo or logo.
• Verification data: company registration or tax identifiers, uploaded business documents and the verification decision and its date.
• Marketplace content: listings, catalogues, availability, portfolios, reviews, recommendations, follows, messages and files you send through the Platform.
• Transaction data: orders, bookings, addresses, amounts, fees, invoices, tracking and payout status. Card data is handled by Stripe; we do not receive full card numbers.
• Technical and security data: sign-in events, device and browser label, approximate location derived from IP, session identifiers, log data and error reports.
• Support data: tickets, correspondence and their attachments.
• Optional analytics data: only where you have consented through the cookie banner.

2. Why we use it and on what legal basis

• To provide the Platform — creating your account, publishing listings, matching buyers with suppliers and providers, processing orders and bookings, messaging and notifications. Basis: performance of a contract.
• To verify businesses and prevent fraud and abuse — checking documents, detecting suspicious sign-ins, enforcing our policies. Basis: legitimate interests, and legal obligation where applicable.
• To process payments and payouts — via Stripe, including identity checks required by payment regulation. Basis: contract and legal obligation.
• To keep accounting and tax records — invoices and transaction records. Basis: legal obligation.
• To improve the product and measure usage — analytics. Basis: consent (cookie banner).
• To send service messages — order and booking updates, security alerts. Basis: contract. Marketing emails are sent only with consent or to existing business contacts within the limits of applicable law, and always with an unsubscribe link.
• To defend legal claims — retaining evidence of transactions and disputes. Basis: legitimate interests.

3. Who we share data with

• Other users, as needed for a transaction: a buyer’s delivery address and contact details are shared with the seller or provider concerned; a provider’s contact details are shared with the buyer after confirmation. Public profile fields (display name, avatar, country/city, ratings, listings) are visible on the marketplace.
• Stripe — payments, payouts and identity verification, acting as an independent controller for its regulatory obligations.
• Infrastructure and service providers — cloud hosting, database and authentication, email delivery, parcel tracking, mapping and geocoding, error monitoring, and our AI assistant provider. They act as processors on our instructions, except where they are independent controllers by law.
• Authorities and advisers — where required by law or to establish, exercise or defend legal claims.

We do not sell personal data.

4. International transfers

Some providers are located outside the European Economic Area. Where that happens, transfers rely on an adequacy decision or on the European Commission’s Standard Contractual Clauses together with additional safeguards. You can request more information about the mechanism used for a specific provider.

5. How long we keep data

• Account and profile data: while your account exists.
• Deleted accounts: a 30-day recovery window, after which profile and personal data are removed or anonymised.
• Orders, bookings, invoices and payment records: retained for the statutory accounting period (10 years in France).
• Verification documents: for the period needed to justify the verification decision, then deleted.
• Security and sign-in logs: normally up to 12 months.
• Support tickets: up to 3 years after closure.
• Cookie consent records: up to 12 months, then we ask again.
• Policy acceptance records (document, version, timestamp, user id): kept for the duration of the account and the limitation period, as proof of agreement.

6. Your rights

Under the GDPR you can request access to your data, correction, erasure, restriction of processing, portability, and you can object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time — for cookies through “Cookie settings” in the footer.

To exercise a right, email legal@clocheverse.com or open a ticket from Help & Support. We answer within one month. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority of your country of residence.

7. Security

We use encryption in transit, encrypted storage at rest, row-level access rules so users can only reach their own records, restricted access to sensitive profile fields, server-side role checks for administrative actions and session management with sign-out from any device. Details are described on our Trust & Security page. No system is completely secure; please report suspected issues to us before disclosing them publicly.

8. Roles between users

When a buyer, seller or provider processes personal data of its own staff, guests or customers using data obtained through ClocheVerse, that user acts as an independent controller and is responsible for its own compliance, including informing the individuals concerned.

9. Children

ClocheVerse is for professionals and is not directed at anyone under 18. We do not knowingly process data of minors.

10. Changes

We may update this policy. The version number and date at the top of this page always show the current version, and material changes are announced on the Platform or by email before they take effect.

Contact

Kinga Corporation SASU — 26 rue Bosquet, 75007 Paris, France. Email: legal@clocheverse.com. You can also open a ticket from Help & Support.