Privacy Policy
How we handle personal data
Last updated: 2025-12-13
This Privacy Policy describes how Climbrift collects and uses personal data when you use the Platform.
1. Controller
HEASEN (SAS), 14 RUE BAUSSET, 75015 PARIS, France
Contact: hello@climbrift.com
2. Data we process
Depending on how you use the Platform, we may process:
- account data (email, user identifier, profile settings, username);
- order data (service configuration, pricing, status, timestamps);
- messaging data (messages you send in order chat);
- preferences (notification preferences);
- technical data (basic logs, device/browser info, IP address as processed by our infrastructure and providers).
3. Why we process data
We process personal data to:
- provide the Platform and its features (account access, orders, chat, notifications);
- process payments and prevent fraud;
- handle support requests, disputes, and safety issues;
- comply with legal obligations.
4. Legal bases (EU/FR)
We process data based on:
- performance of a contract (providing the Platform and Services);
- legitimate interests (security, fraud prevention, service improvement);
- compliance with legal obligations;
- consent where required (for certain communications).
5. Sharing and processors
We use service providers to operate the Platform, including:
- payment processing (Stripe);
- authentication and database infrastructure (Supabase);
- email delivery (Resend or equivalent, via our outbox workflow).
We may share data with Boosters only to the extent necessary to perform an Order and operate the Platform features.
6. Retention
We keep personal data only as long as necessary for the purposes above, including compliance, dispute handling, and security. Some records may be retained longer where required by law.
7. Your rights
Under applicable law, you may have rights to access, rectify, delete, object, and restrict processing, as well as data portability where applicable.
To exercise your rights, contact: hello@climbrift.com
8. International transfers
Some processors may operate outside the EU. Where applicable, we rely on appropriate safeguards.
9. Changes
We may update this policy. The latest version is published on the Platform.
