Privacy Policy
How we collect, use and protect your personal data in connection with the service.
2. Data we collect
- Account identifiers: email, display name.
- User content: certificate title & message.
- Payments: processed by Stripe; we do not store your card details.
- Technical logs: server logs, IP addresses, events, app errors, integrity hash (SHA-256) linked to the certificate.
- KYC/KYB data (marketplace sellers): collected and verified by Stripe.
3. Purposes & legal bases
- Performance of contract: creating and delivering certificates, generating PDF/QR, sending transactional emails.
- Payments & anti-fraud: contractual necessity / legitimate interest; checks by Stripe.
- Support & maintenance, error remediation: legitimate interest.
- Public registry (if you enable it): performance of the service based on your explicit setting.
4. Sources
Data provided by you (forms, account), generated by your use of the service (logs), or provided by our payment provider (transaction statuses, KYC/KYB checks for sellers).
5. Recipients & processors
We use service providers to host, store and process certain data. They act as processors or, for certain payment operations, as independent controllers.
- Stripe — payments, KYC/KYB, anti-fraud (controller for some data).
- Base de données (ex. Supabase EU) — hosting and storage.
- Hébergement applicatif (ex. Vercel) — deployment, CDN, technical logs.
6. International transfers
Primary hosting is planned in the EU where possible. If data are transferred to third countries (e.g., global support, CDN), transfers rely on a compliant mechanism (SCCs, adequacy decisions, supplementary measures).
7. Retention
- Account & certificates: as long as the account is active; deletion upon request (subject to legal obligations).
- Technical logs: a few weeks to a few months.
- Payment data: according to Stripe’s legal obligations.
8. Marketplace & roles
For the P2P marketplace, we act as a platform operator and collection agent. Sellers are responsible for their listings and obligations (e.g., tax).
Stripe may conduct KYC/KYB checks and anti-fraud analyses that can temporarily block a payment.
9. Security
- Encryption in transit (HTTPS/TLS).
- Access controls, environment separation.
- Technical logging & alerting.
- Backups handled by infrastructure (per provider).
No decision producing legal effects based solely on automated processing; automated anti-fraud checks may apply.
11. Your GDPR rights
You have the rights of access, rectification, erasure, objection, restriction and portability. You may withdraw consent at any time for processing based on consent.
12. Children
The service is not directed to children. If you are below the applicable age of digital consent in your country, consent from a legal guardian may be required.
13. Changes
We may update this policy to reflect changes in our processing. The update date is shown at the top of this page.
14. Contact & complaints
Support: support@parcelsoftime.com ·
You may lodge a complaint with your supervisory authority if you believe your rights are not respected.