Crafterlity privacy policy

This privacy policy explains how Crafterlity collects, uses, shares and protects personal data when you use the Crafterlity mobile app.

1. Data we collect

We collect only the data needed to operate the service, depending on how you use the app.

Account data

When you create an account or sign in, we may collect:

  • your email address;
  • your first and last name;
  • your phone number;
  • your password, stored securely by our authentication systems;
  • your authentication and session tokens;
  • the sign-in method you use, including email, Apple or Google;
  • the consents you give, such as to the terms of use and privacy policy;
  • account creation, update, email verification and last sign-in dates.

Professional data

If you use Crafterlity as a professional, we may collect:

  • your business name;
  • your SIRET or SIREN number;
  • your legal form;
  • your registration date;
  • your business address;
  • your professional verification or onboarding status;
  • your availability;
  • the specialties or mission categories linked to your profile;
  • public or administrative information obtained through INSEE services to verify your activity.

Mission data

When you create, view or work on a mission, we may collect:

  • the type of need or specialty requested;
  • the title, description and information entered in the mission form;
  • the urgency, preferred date and time;
  • the intervention address, including city, postal code and geographic coordinates when needed;
  • photos added by the user to illustrate the mission;
  • offers, prices, estimated arrival times, messages, mission statuses and cancellation reasons;
  • information about intervention tracking, such as “on the way”, “arrived”, “in progress” or “completed”.

Location

Crafterlity uses location to:

  • help a customer enter the intervention address;
  • show or calculate distances between a mission and a professional;
  • let the customer track the professional’s arrival when a mission is accepted and the professional indicates they are on the way;
  • update the professional’s position while travelling to the mission.

For customers, location is used when you choose to use your current position or enter a mission address.

For professionals, location may be processed in the background only during travel for an accepted mission when location sharing is enabled for that mission. Tracking stops when the mission is no longer “on the way” or when the professional stops tracking.

Location data may include latitude, longitude, an inferred address, estimated distance and estimated arrival time.

Photos and uploaded content

If you use the camera or photo library, we collect only the images you choose to add to a mission. These images help professionals understand the need and document the mission.

Payments and payouts

Crafterlity uses Stripe to process payments, verify some professionals and manage payouts. Depending on your use of the service, we may process or send Stripe:

  • mission payment information, such as the amount, service fees and payment identifier;
  • a professional’s Stripe Connect account information;
  • information needed to verify the identity of a legal representative or beneficial owner, such as their name, date of birth, email, phone number, address and role;
  • banking information needed for payouts, including IBAN and account holder name.

Card details and some verification data may be collected directly by Stripe or tokenized before being sent to our servers. Stripe applies its own security and privacy rules to payment data.

Notifications

If you enable notifications, we collect:

  • the push notification token;
  • the platform used, such as iOS or Android;
  • a technical device identifier generated by the app.

This information is used to send notifications about missions, offers, messages, payments, intervention statuses and important alerts.

Technical data

When you use the app, we may process:

  • connection data needed to secure the service;
  • server-side technical logs, which may include IP address, request dates and times, errors and diagnostic information;
  • device language or region so the app can be displayed in the right language;
  • information strictly needed for maps, address searches, notifications and API calls.

2. Why we use your data

We use your data to:

  • create and manage your account;
  • authenticate you and protect access to the service;
  • verify professional accounts;
  • enable missions to be created, posted, assigned, tracked and closed;
  • show customers and professionals useful information, such as the intervention address, distance and estimated arrival time;
  • allow professionals to submit offers;
  • process payments, refunds and payouts, and meet fraud prevention obligations;
  • send important notifications;
  • provide user support;
  • prevent abuse, fraud, security incidents and unpaid amounts;
  • meet legal, accounting, tax and regulatory obligations;
  • improve the quality and stability of the service.

We do not use your personal data to sell data or for targeted advertising.

3. Legal bases for processing

Depending on the circumstances, we process your data on the following legal bases:

  • performance of a contract, to provide the Crafterlity service and manage accounts, missions, payments and necessary notifications;
  • consent, including for notifications, location, photo library or camera access when requested by the operating system;
  • legitimate interests, to secure the service, prevent fraud, provide support and improve the app’s reliability;
  • legal obligation, including accounting, tax, payment, fraud prevention and verification obligations related to payment services.

4. Sharing data

We share certain data only when necessary to operate the service.

With other users

When a mission is created or accepted:

  • some mission details may be visible to eligible professionals, such as category, description, schedule, city or address depending on the mission stage;
  • the customer can see useful information about the selected professional, such as their name, business, profile, offer, estimated distance and arrival tracking;
  • the selected professional can access information needed for the intervention, including the exact address once the mission is assigned.

With our service providers

We may share data with technical providers that help us deliver the service, including:

  • hosting, APIs and technical infrastructure;
  • storage and delivery of mission images;
  • push notifications;
  • payment and verification services, including Stripe;
  • mapping, geocoding or route services;
  • public administrative services or partners that search for or verify business information, including INSEE;
  • Apple or Google sign-in services when you use those sign-in methods.

These providers may use the data only for purposes needed to deliver their services, subject to their own contractual and legal obligations.

For legal reasons

We may disclose data when needed to comply with the law, respond to a competent authority, protect our rights, prevent fraud or keep users safe.

5. Data retention

We keep personal data only for as long as needed for the purposes described in this policy.

As a guide:

  • account data is kept while the account is active;
  • mission data is kept for the time needed to complete the mission, provide support, maintain contractual evidence and meet legal obligations;
  • payment, billing, accounting and verification data may be kept for the applicable legal periods;
  • notification tokens are kept while you use notifications or until deletion, sign-out or renewal;
  • journey location data is used to track the mission and should not be kept longer than needed for tracking, evidence of the intervention, security and support.

When you request account deletion, we delete or anonymize data that is no longer needed, except where retention is required by law or needed to defend rights, maintain security, prevent fraud or resolve a dispute.

6. Security

We put reasonable measures in place to protect your data, including:

  • sending data over secure connections;
  • secure storage of authentication tokens on the device when available;
  • limiting data access to people and services that need it;
  • using established providers for payments and verification;
  • deleting or restricting data when it is no longer needed.

No digital service can guarantee absolute security, but we work to protect your data against unauthorized access, loss, alteration or disclosure.

7. Your choices and rights

Under applicable law, including the GDPR if you are in the European Union, you may request:

  • access to your personal data;
  • correction of inaccurate data;
  • deletion of your data;
  • restriction of processing;
  • objection to certain processing;
  • portability of your data;
  • withdrawal of consent where processing is based on consent.

You can also manage certain permissions in your device settings, including:

  • location;
  • notifications;
  • camera;
  • photo library.

To exercise your rights, contact us at: contact@crafterlity.com.

We may ask for additional information to verify your identity before processing your request.

If you believe your rights are not respected, you can contact the relevant data protection authority. In France, this is the CNIL: https://www.cnil.fr/

8. Account deletion

You can request deletion of your account:

  • from the app, when this feature is available in account settings;
  • or by contacting us at: contact@crafterlity.com;

Account deletion results in the deletion or anonymization of associated data, except where some data must be kept to meet a legal obligation, process a payment, prevent fraud, resolve a dispute or keep the service secure.

9. Transfers outside the European Union

Some providers may process data outside the European Union. Where this occurs, we ensure that transfers are covered by appropriate safeguards, such as standard contractual clauses, security measures or another mechanism recognized by applicable law.

10. Minors

Crafterlity is not intended for children. The app must be used by adults or people with the legal capacity needed to make an intervention request or act as a professional.

If we learn that a minor has provided us with data without valid authorization, we will take reasonable steps to delete it.

11. Changes to this policy

We may update this privacy policy to reflect changes to the app, our processing activities or our legal obligations.

The update date shown at the top of this page will change when we make an update. For significant changes, we may notify you in the app or by another appropriate means.

12. Contact

For questions about this policy or how we process your personal data, you can contact us:

Email: contact@crafterlity.com

Postal address: 5 Chemin de gravignan, 69360 Ternay, France