Privacy Policy

1. Data controller

The website payhope.fr is published by Victoria KACOU, located at 9 rue Gabriel Péri, 94380 Bonneuil-sur-Marne, France, who acts as the controller of the personal data collected through the site.

For any question or request regarding your personal data, you can contact us at: dpo@payhope.fr.

The PayHope project is currently being structured legally as a SAS (a French simplified joint-stock company). This policy will be updated once incorporation is complete.

2. Data we collect

We only collect personal data when you provide it to us voluntarily:

• "Waitlist" form: first name, email address, the cause you are interested in (optional) and whether you want to take part in testing (optional)
• "Contact" form: first name, email address, message
• "PayHope Gift" quote request form: first name (optional), last name, work email address, company or works council, approximate number of recipients, estimated amount, preferred period and message (optional)
• Audience measurement cookies (if you consent): anonymized browsing data (pages visited, time on site, traffic source, session recordings and heatmaps via Microsoft Clarity)

The forms do not set any cookie.

3. Legal bases and purposes

In accordance with Article 6 of the GDPR, processing relies on the following legal bases:

• Waitlist: your consent (Art. 6(1)(a)). Purpose: to inform you of PayHope's launch and, if you indicated so, to contact you about becoming a tester.
• Contact form and PayHope Gift quote request: our legitimate interest in answering your requests (Art. 6(1)(f)).
• Google Analytics and Microsoft Clarity: your consent (Art. 6(1)(a)). Purpose: to analyze site traffic and improve the user experience.

We never use your data for unsolicited commercial prospecting, and we do not resell it.

4. Recipients and processors

Your data may be processed by the following providers, acting as processors:

• Vercel Inc. (site hosting)
• Google Ireland Ltd. (Google Analytics, and Google Sheets for storing form data)
• Microsoft Ireland Operations Ltd. (Microsoft Clarity)
• Resend (sending confirmation and notification emails)

These providers process data in accordance with our instructions and the requirements of the GDPR.

5. Transfers outside the European Union

Some processing may involve transferring data to the United States, in particular through hosting, Google Analytics, Microsoft Clarity and email delivery.

These transfers are covered by the mechanisms provided for by the GDPR, in particular the Standard Contractual Clauses adopted by the European Commission (Art. 46 GDPR).

6. Retention

• Waitlist: until the product launch, then 12 months at most
• Contact messages and quote requests: 12 months at most
• Audience measurement cookies (Google and Microsoft): 13 months at most
• Withdrawal of consent: collection stops immediately, and your waitlist data is deleted on simple request to dpo@payhope.fr

7. Cookies

On your first visit, a banner lets you accept or decline audience measurement cookies.

• Without consent: no audience measurement cookie is set
• With consent: Google Analytics and Microsoft Clarity set audience measurement cookies

You can change or withdraw your choice at any time, as easily as you gave it, by clicking "Manage cookies" at the bottom of every page. If you decline after having accepted, the audience measurement cookies are deleted and collection stops.

8. Your rights

In accordance with Articles 12 to 23 of the GDPR, you have the following rights:

• Access to your data
• Rectification
• Erasure (right to be forgotten)
• Objection
• Restriction of processing
• Portability
• Withdrawal of consent at any time (Art. 7(3))

To exercise your rights, contact dpo@payhope.fr (Victoria KACOU, 9 rue Gabriel Péri, 94380 Bonneuil-sur-Marne, France). We commit to responding within one month at most.

You may also lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority.

9. Data security

We implement appropriate technical and organizational measures (Art. 32 GDPR), including:

• access control to data (Google Sheets spreadsheet accessible only to the site's administrator),
• securing of administrator accounts,
• use of providers recognized for the security of their infrastructure.

10. Policy updates

This policy may be amended to ensure its continued compliance with the GDPR or to reflect the evolution of the PayHope project. The date of the last update is shown at the top of the page.