1. Who We Are
FrenchPat ("we", "our", or "us") is a service that helps newcomers navigate French administrative procedures. We are the data controller for the personal information we collect through our website at frenchpat.com.
Contact: privacy@frenchpat.com
2. What Data We Collect
We collect the following types of personal information:
Account Information
- Email address (required for account creation)
- Name (optional)
- Phone number (optional)
Profile Information
- Nationality
- Visa type
- Arrival date in France
- Preferred language
Administrative Data
- Information about your administrative dossiers and their status
- Documents you choose to upload (ID copies, attestations, etc.)
- Notes and reminders you create
Usage Data
- Pages visited and features used
- Time spent on the platform
- Device and browser information
3. Why We Collect Your Data (Legal Basis)
We process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to provide you with our services (account management, dossier tracking, reminders)
- Legitimate Interest: Improving our services, ensuring security, and communicating with you about your account
- Consent: Marketing communications (only if you opt-in)
4. How We Use Your Data
We use your personal information to:
- Create and manage your account
- Provide personalized guidance for your administrative procedures
- Send you reminders about deadlines and tasks
- Store your documents securely
- Improve our services and develop new features
- Respond to your questions and support requests
- Ensure the security of our platform
5. Who We Share Data With
We use trusted third-party service providers to operate our platform. These providers process data on our behalf and are bound by data processing agreements:
- Supabase (database hosting) - EU servers (Ireland/Frankfurt)
- Clerk (authentication) - processes login data
- Vercel (website hosting) - EU region available
- Stripe (payments) - if you subscribe to paid features
- Resend (email) - for sending notifications
We never sell your personal data to third parties.
6. How Long We Keep Your Data
- Account data: Until you delete your account
- Documents: Until you delete them, or automatically 3 years after your last login
- Usage logs: 90 days
- Support communications: 2 years
7. Your Rights Under GDPR
As a user in the European Union, you have the following rights:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Correct any inaccurate data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Data Portability: Export your data in a machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time for consent-based processing
8. How to Exercise Your Rights
You can exercise your rights in the following ways:
- In-app: Go to Settings → Privacy to download or delete your data
- By email: Contact us at privacy@frenchpat.com
We will respond to your request within 30 days.
9. Data Security
We implement appropriate technical and organizational measures to protect your data:
- All data is encrypted in transit (HTTPS/TLS)
- Data at rest is encrypted
- Access to data is restricted and logged
- Regular security assessments
- Two-factor authentication available
10. International Transfers
Your data is primarily stored in the European Union. When we use service providers outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.
11. Cookies
We use essential cookies required for the website to function. For optional analytics cookies, we ask for your consent. See our Cookie Policy for more details.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through a notice on our website. The "Last updated" date at the top indicates when the policy was last revised.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
- Email: privacy@frenchpat.com
14. Supervisory Authority
If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with a supervisory authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL):
- Website: www.cnil.fr
- Address: 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07