Privacy Policy

How we handle personal data

Last updated: 2025-12-13

This Privacy Policy describes how Climbrift collects and uses personal data when you use the Platform.

1. Controller

HEASEN (SAS), 14 RUE BAUSSET, 75015 PARIS, France
Contact: hello@climbrift.com

2. Data we process

Depending on how you use the Platform, we may process:

  • account data (email, user identifier, profile settings, username);
  • order data (service configuration, pricing, status, timestamps);
  • messaging data (messages you send in order chat);
  • preferences (notification preferences);
  • technical data (basic logs, device/browser info, IP address as processed by our infrastructure and providers).

3. Why we process data

We process personal data to:

  • provide the Platform and its features (account access, orders, chat, notifications);
  • process payments and prevent fraud;
  • handle support requests, disputes, and safety issues;
  • comply with legal obligations.

We process data based on:

  • performance of a contract (providing the Platform and Services);
  • legitimate interests (security, fraud prevention, service improvement);
  • compliance with legal obligations;
  • consent where required (for certain communications).

5. Sharing and processors

We use service providers to operate the Platform, including:

  • payment processing (Stripe);
  • authentication and database infrastructure (Supabase);
  • email delivery (Resend or equivalent, via our outbox workflow).

We may share data with Boosters only to the extent necessary to perform an Order and operate the Platform features.

6. Retention

We keep personal data only as long as necessary for the purposes above, including compliance, dispute handling, and security. Some records may be retained longer where required by law.

7. Your rights

Under applicable law, you may have rights to access, rectify, delete, object, and restrict processing, as well as data portability where applicable.

To exercise your rights, contact: hello@climbrift.com

8. International transfers

Some processors may operate outside the EU. Where applicable, we rely on appropriate safeguards.

9. Changes

We may update this policy. The latest version is published on the Platform.