Privacy Policy

Moovland (“we,” “us,” “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy applies to all users of our website, web application, and related services worldwide. Where local law provides you with additional rights, we describe those rights in the region-specific sections below.

1. Applicability

This Privacy Policy governs all personal data processing by Moovland:

• GDPR (Regulation (EU) 2016/679) and the French Data Protection Act (Loi Informatique et Libertés) for all users.
• CCPA/CPRA for California residents.
• Other jurisdictions: you may have additional rights under local laws — contact dpo@moovland.com for details.

2. Data Controller

Moovland SAS
47 rue Vivienne, 75002 Paris, France
RCS Paris 130 227 267
Email: dpo@moovland.com

3. Personal Data We Collect

Category	Examples	Source
Identification Data	Name, email address, phone number	You (forms, account)
Account Data	Username, password hash	You (registration)
Communication Data	Support tickets, feedback messages	You
Usage Data	Pages visited, features used, session logs	Automated via cookies and analytics tools
Device & Technical Data	IP address, browser type, device identifiers	Automated
Assessment Data	Answers you give the calendar assessment, the figure it works out, and — only if you ask for it in writing — your name and email address	You
Partner tax identity	Company name, SIREN/SIRET, VAT number, registered address, bank account (IBAN); for a sole trader (entrepreneur individuel) also first and last name, date and place of birth, and tax number	Partner onboarding form, public company register, Stripe (identity checks)

4. Purposes & Legal Bases for Processing

Purpose	Legal Basis (GDPR)
To create and manage your user account	Performance of a contract
To provide, operate, and improve our Service	Legitimate interest (service operation, analytics)
To send transactional emails (e.g. updates)	Performance of a contract
To send marketing communications (if opted in)	Your consent
To comply with legal obligations (e.g. VAT)	Compliance with a legal obligation
Report platform sellers’ income to the tax authorities (DAC7, article 1649 ter A of the French tax code) and issue receipts under the partner’s invoicing mandate	Legal obligation

5. Cookies & Tracking

We use cookies and similar technologies to operate and improve our Service:

• Essential Cookies: necessary for core functionality.
• Analytic Cookies: to understand usage and optimize performance.
• Marketing Cookies: with your consent, to deliver personalized promotions.

You can learn more and manage your preferences in our Cookie Policy.

6. Data Processors & Hosting

We engage the following third-party processors under data-processing agreements meeting GDPR standards:

• Google Cloud Platform (GCP) for hosting and infrastructure. Documentation: cloud.google.com/security/privacy
• Google reCAPTCHA Enterprise, through Firebase App Check, to protect our contact form against spam and automated abuse (legitimate interest: security of the Service). It runs only on the contact page, once you start filling in the form. See our Cookie Policy.

All data at rest and in transit is encrypted (AES-256 at rest; TLS 1.2+ in transit).

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes listed above or as required by law. Typical retention periods:

• Account & Profile Data: while your account is active + 1 year thereafter.
• Support Tickets & Correspondence: 3 years.
• Logs & Analytics Data: aggregated or anonymized after 12 months; raw logs for up to 6 months.
• Partner tax identity and verification history: 10 years after the end of the year concerned (DAC7 due diligence); cash-register journal and receipts: 6 years.

8. International Transfers

Some processing (e.g. GCP servers) occurs outside the European Economic Area (e.g. USA). We ensure appropriate safeguards under the GDPR, such as:

• Standard contractual clauses approved by the European Commission.
• Data encryption at rest and in transit.

9. Your Global Privacy Rights

9.1 Residents of the EEA (GDPR)

Under the EU General Data Protection Regulation, you have the right to:

• Access, rectify, or erase your personal data.
• Restrict or object to processing.
• Data portability.
• Lodge a complaint with an EU supervisory authority.

To exercise these rights, contact dpo@moovland.com.

9.2 Consumers in California (CCPA/CPRA)

Under the California Consumer Privacy Act and California Privacy Rights Act, you have the right to:

• Know what personal data we collect and how we use it.
• Request deletion of your personal data.
• Opt out of the sale of your personal data.
• Non-discrimination for exercising your rights.

To submit a request, email dpo@moovland.com.

9.3 Other Regions

You may have additional rights under local data protection laws (e.g. Brazil’s LGPD, Canada’s PIPEDA). Please contact dpo@moovland.com for more information.

10. Security

We implement appropriate technical and organizational measures to protect your data, including:

• AES-256 encryption for data at rest.
• TLS 1.2+ for data in transit.
• Regular security audits and penetration tests.
• Role-based access controls and least-privilege policies.

11. Children

Our Service is intended for users who have reached the legal age to consent in their jurisdiction. Minors who have not reached that age may only use the Service with verifiable consent from a parent or legal guardian.

If you believe we have collected personal data from a minor without appropriate consent, please contact dpo@moovland.com to have it deleted.

12. Changes to This Policy

We may update this Policy to reflect changes in our practices or applicable law. We will post the revised Policy here with a new “Last Updated” date. Continued use of the Service after changes constitutes your acceptance.

13. Contact Us

If you have questions, complaints, or wish to exercise your rights, please contact:

Data Protection Officer
Moovland
Email: dpo@moovland.com

Alternatively, you may lodge a complaint with the French supervisory authority, the CNIL, at www.cnil.fr.