Privacy Policy

1. Introduction

Bike Shop Network ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and disclose your personal information when you use our B2B SaaS service ("Service").

The data controller responsible for your information is Benoît Morin (SIRET: 83340915400022).

2. Information We Collect

We collect information you provide directly to us, necessary for the performance of our contract with you:

• Account Information: Your name, email address, and company information are required to create and manage your account, provide customer support, and send important service-related communications.
• Billing Information: All payment processing is handled by our Merchant of Record, Paddle.com. We do not collect or store your credit card details. Paddle may collect information necessary to process your payment.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Performance of a Contract: The majority of our processing is necessary to provide the Service you have subscribed to.
• Legal Obligation: We are required to process certain data for compliance with legal and tax obligations.

4. Data Sharing and Sub-processors

To provide our Service, we rely on trusted third-party services (sub-processors). We have verified that these partners have strong privacy and security standards. Our key sub-processors are:

• Hosting: Vercel (USA) for application hosting.
• Database & Authentication: Supabase (USA) for database management and user authentication.
• Payments: Paddle.com (UK/Ireland) as our Merchant of Record.
• CRM & Communications: Zoho (EU Datacenter) for customer support emails.

Some of these sub-processors are located outside the European Economic Area (EEA). In such cases, we ensure that data transfers are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs).

5. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter to comply with our legal obligations (e.g., for tax and accounting purposes). After this period, your personal data will be securely deleted.

6. Cookies and Analytics

• Essential Cookies: We may use essential cookies to maintain your login session and ensure the security of your account. These cookies do not track you and are necessary for the functioning of the Service.
• Analytics: We use Vercel Analytics to understand service usage and improve performance. This tool is privacy-focused: it does not use cookies and does not collect any personally identifiable information.

7. Your Data Rights (GDPR)

As a user, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request to correct any inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request the deletion of your personal data.
• Right to Restrict Processing: You can request to limit how we use your data.
• Right to Data Portability: You can request to receive your data in a machine-readable format.
• Right to Object: You can object to our processing of your data.

To exercise any of these rights, please contact us. You also have the right to lodge a complaint with a supervisory authority, such as the CNIL in France.