Privacy Policy – How We Protect Your Personal Data

1. Introduction

La Chapelle Club SAS, a French simplified joint-stock company headquartered at 14 Rue Maréchal Joffre, 33000 Bordeaux, France (SIRET 92180801000018), operates the Freezbee platform accessible at www.freezbee.co. As data controller, we take the protection of your personal data seriously. This Privacy Policy explains what data we collect, how we use it, who we share it with and what your rights are under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.

2. Information we collect

We collect the following categories of personal data:

Account data you provide at sign-up: first name, last name, email, password (stored hashed), and the IP address used to register. Creators also provide a LinkedIn profile URL, audience size, categories, and a short bio. Brands also provide a company name, phone number, billing contact and the channel through which they discovered Freezbee.
Profile content you choose to publish: photo, bio, recommendations, collaboration history.
Collaboration data: the list and content of deals you participate in, briefs, and exchanges with the other party.
LinkedIn-post screenshots you upload for validation, including the engagement metrics they contain (impressions, reactions, comments).
Payment data: billing details for Brands. Card data is collected and stored exclusively by our payment provider Stripe; we never see or store full card numbers.
Usage and device data: IP address, browser type and version, operating system, pages visited, search terms, time spent, response times, and similar telemetry collected via cookies and equivalent technologies.
Authentication data from third-party providers (Google) when you choose to sign in with them, limited to your name, email and profile picture as authorised by you on their side.

3. How we use your data and legal bases

We process your personal data for the following purposes:

Providing the service: creating and managing your account, matching Brands with Creators, transmitting collaboration offers, delivering rewards and promo codes (legal basis: performance of our contract with you).
Validating LinkedIn posts: running automated AI analysis on the screenshots you submit, using a vision model operated by Anthropic, to extract engagement metrics and check brief compliance. A human reviewer may intervene (legal basis: performance of our contract).
Processing payments: forwarding billing details to Stripe (legal basis: performance of our contract; legitimate interest in fraud prevention).
Sending service emails and notifications about your account, your deals and your rewards (legal basis: performance of our contract).
Sending marketing communications about new features or relevant deals where required (legal basis: your consent or our legitimate interest, depending on the channel and your country).
Improving and securing the Platform: analytics, debugging, abuse prevention, content moderation, internal research (legal basis: legitimate interest).
Complying with our legal obligations, including accounting and tax obligations (legal basis: legal obligation).
Establishing, exercising or defending legal claims (legal basis: legitimate interest).

4. Recipients and subprocessors

We do not sell your personal data. We share it only as follows:

With other members of the Platform when both sides agree to collaborate: a Creator who accepts a deal shares their contact details with the Brand, and vice versa.
With service providers acting as subprocessors on our behalf and bound by data-protection agreements: Vercel Inc. (hosting and CDN), our database and storage providers, Stripe Payments Europe (payments), Anthropic (AI screenshot analysis), Google (OAuth sign-in if you use it), our transactional email provider, and our product-analytics provider.
With competent authorities when required by law, judicial order or to protect our rights.

5. International transfers

Personal data is processed primarily within the European Union. Some of our subprocessors (notably Vercel, Anthropic, Google and Stripe) are based in or operate from the United States. Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or, where applicable, adequacy decisions, to ensure that your data continues to benefit from an essentially equivalent level of protection.

6. Data retention

We keep your personal data only for as long as necessary for the purposes for which it was collected:

Account data: for the duration of your account, plus up to 3 years of inactivity, after which it is deleted or anonymised.
Submitted screenshots and collaboration history: until validation of the deal plus 1 year, then anonymised for analytics purposes only.
Billing and accounting records: 10 years from the end of the fiscal year, as required by the French Commercial Code.
Marketing-consent records: until you withdraw your consent, plus 3 years for proof purposes.
Server logs: typically up to 12 months for security purposes.

7. Your rights

Under the GDPR, you have the right to access your personal data, to obtain its rectification or erasure, to restrict or object to its processing, to data portability, and to give instructions regarding the fate of your data after your death. You may withdraw your consent at any time for processing based on consent. You also have the right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr). To exercise these rights, write to hey@freezbee.co or to La Chapelle Club SAS, 14 Rue Maréchal Joffre, 33000 Bordeaux, France. We may need to verify your identity before responding.

8. Cookies and similar technologies

We use a small set of cookies and similar technologies: strictly necessary cookies for session management (via our authentication library), optional analytics cookies to understand how the Platform is used, and optional marketing cookies. Non-essential cookies are only set after you give consent through our cookie banner; you can change your choices at any time from the banner or your browser settings.

9. Security and password confidentiality

We implement technical and organisational measures appropriate to the nature of the data we process, including encryption in transit, access controls, audit logs and regular reviews of our subprocessors. You are responsible for keeping your account password confidential and for any activity that occurs under your account. Please notify us immediately if you suspect unauthorised access.

10. Links to third-party websites

The Platform may contain links to third-party websites, including those of our Brand partners. Those sites have their own privacy policies and we are not responsible for the data they collect. We encourage you to review their policies before providing them with personal data.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, in our practices or in our subprocessors. Material changes will be communicated by email or by a prominent notice on the Platform. We invite you to revisit this page regularly.

12. Contact

For any question regarding this Privacy Policy or to exercise your rights, you can reach us at hey@freezbee.co or by post at La Chapelle Club SAS, 14 Rue Maréchal Joffre, 33000 Bordeaux, France.