Privacy Policy
1. Who is responsible
The data controller is ENJOY PROVENCE, Rue Appolinaire Jaubert, 84240 La Motte-d'Aigues, France. Contact for privacy questions: hello@reachweb3.com.
2. What we collect and why
| Account | Email address, source of arrival (for example the site you came from), last sign-in date, credit balance. To create your account, sign you in and run the Service. Basis: contract. |
| Sign-in links | A hashed one-time token, valid for 15 minutes, linked to your email. Basis: contract and security. |
| Purchases and unlocks | Pack bought, amount, date, credits, the profiles you unlocked, and manual credit changes. Basis: contract and legal obligation (accounting). Stripe handles your card details; we do not receive them. |
| Audience statistics | When you open the home page or the app we record an anonymous page view with its source (for example the referring site or a campaign tag). The visitor is identified only by a code that mixes the IP address and the browser type with a daily secret and changes every day. We do not store your IP address in this statistic and we use no advertising or tracking cookie. Basis: legitimate interest in measuring how the Service is used. |
| Support | Messages you send us. Basis: legitimate interest and contract. |
3. Cookies
We use one strictly necessary cookie that keeps you signed in (30 days). It is not used for tracking and needs no consent. If you sign out, it is removed. The pages load fonts from Google Fonts, which means your browser contacts Google when a page opens.
4. Who receives data
- Stripe: payments. Resend: sending sign-in emails. o2switch: hosting and database.
- These providers act on our behalf. Some may process data outside the European Economic Area (for example in the United States); in that case we rely on a recognised transfer mechanism such as the EU-US Data Privacy Framework or standard contractual clauses.
- We do not sell personal data and we do not share it for advertising.
5. How long we keep it
- Account and unlocked profiles: kept while your account is open. You can ask for deletion at any time.
- Invoices and payment records: 10 years, as required by French accounting rules.
- Sign-in tokens: used or expired tokens are removed regularly.
- Anonymous page views: up to 25 months.
6. Your rights
You can ask to access, correct, delete, restrict or export your data, and object to processing based on legitimate interest. Write to hello@reachweb3.com. We will answer within one month. You can also complain to the French data protection authority (CNIL, cnil.fr) or to the authority in your country.
7. Data about media, creators and their contacts
The database lists media outlets and public creators with professional contact details that they published (a sponsor page, a business email, a public profile). We keep only information needed to contact them about business or sponsorship, from public sources, based on our legitimate interest and our customers' interest in professional outreach. If you appear in the database and want a correction, removal or to object, write to hello@reachweb3.com with the profile name and we will act without undue delay.
8. Security
Access to the data is protected by sign-in, contact details are shown only after unlocking, connections use HTTPS, and sign-in tokens are stored hashed. No system is perfectly secure; if a breach affects your data we will inform you and the authority as the law requires.
9. Changes
We may update this policy and will show the date above. Material changes will be announced by email or in the app.