Privacy Policy

1. Data Controller

2. Data Collected

2.1 Data you provide to us

• Account information: last name, first name, email, phone number, business name
• Billing information: billing address, payment details
• Business information: type of business, number of locations, industry
• Created content: custom rewards, marketing campaigns, review responses

2.2 Automatically collected data

• Connection data: IP address, browser type, operating system
• Usage data: pages visited, features used, session duration
• Cookies and similar technologies: preferences, visit statistics

2.3 Your customers' data

When your customers use the Boostigo prize wheel, we may collect:

• Email (if the customer chooses to provide it to receive their reward)
• Phone number (for SMS rewards)
• Interaction data (number of entries, rewards won)

3. Purpose of Processing

We use your personal data for the following purposes:

4. Legal Basis

In accordance with the GDPR, we process your data on the following legal bases:

• Contract performance: to provide the services you have subscribed to
• Consent: for marketing communications and non-essential cookies
• Legitimate interest: to improve our services and ensure platform security
• Legal obligation: for billing and regulatory compliance

5. Data Sharing

We never sell your personal data. We may share your information with:

5.1 Service providers

• Cloud hosting: Scaleway (France)
• Payment processing: Stripe
• Email services: Supabase
• Analytics tools: Google Analytics

5.2 Third-party platforms

To enable review collection, we interact with the APIs of Google, Instagram, TripAdvisor, and Facebook in accordance with their respective terms of use.

5.3 Legal obligations

We may disclose your data if required by law or to protect our rights, property, or safety.

6. Data Retention

7. Your Rights

In accordance with the GDPR, you have the following rights:

8. Data Security

We implement technical and organizational measures to protect your data:

• Encryption of data in transit (SSL/TLS) and at rest
• Strong authentication and secure access management
• Regular backups and business continuity plan
• Security audits and regular penetration testing
• Training our teams in security best practices
• Hosting on certified secure servers

9. Cookies

Our website uses cookies to improve your experience. We use:

9.1 Essential cookies

Required for the website to function (login, cart, etc.). These cookies cannot be disabled.

9.2 Analytics cookies

To understand how you use our website and improve it (Google Analytics, etc.). You can decline these via our cookie banner.

9.3 Marketing cookies

To personalize advertising content. You can decline these via our cookie banner.

You can manage your cookie preferences at any time through your browser settings or our cookie management tool.

10. Data Transfers

Your data is primarily hosted within the European Union. If we need to transfer your data outside the EU, we ensure that:

• The destination country provides an adequate level of protection recognized by the European Commission
• Or that appropriate safeguards are in place (standard contractual clauses, etc.)
• Or that you have given your explicit consent

11. Minors

Our services are intended for professionals. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have collected information about a minor, please contact us immediately.

12. Changes

We may update this privacy policy. Any significant changes will be notified to you by email or via a notification on the platform. The last update date is indicated at the top of this document.

13. Complaints

If you believe your rights are not being respected, you can file a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés):

14. Contact

For any questions regarding this privacy policy or your personal data: