Privacy Policy

Last updated: September 2025

This Privacy Policy aims to inform you, with full transparency, about how Kyvo collects, uses, stores, and protects your personal data. We place particular importance on respecting your privacy and are committed to processing your information in accordance with the General Data Protection Regulation (GDPR) and applicable laws.

Data Controller

The data controller is Vinsonneau Antoine, sole proprietor, operating under the trade name Kyvo, registered under SIRET 933 180 564 00017, with the address 86 Allée des frères Grimm, 34070 Montpellier, France. For any questions regarding your data, you can contact us at: support@kyvofidelity.fr.

Data Collected

As part of using our services, we only collect information strictly necessary for their proper operation. For merchants, this includes first name, last name, email address, phone number, as well as information related to the subscription and loyalty cards created on the platform. For end customers, the data collected is limited to the email address, when registration is performed, as well as information directly related to the use of loyalty cards, such as the number of points accumulated or rewards obtained. We emphasize that we do not collect full IP addresses, precise geolocation data, or any data considered sensitive under the GDPR. Minimal technical data, such as basic connection logs, may be recorded to ensure the proper functioning and security of the service.

Purposes of Processing

The collected data is used exclusively to meet the needs related to the operation of the application. For merchants, this concerns account creation and management, customization of loyalty cards, and subscription management. For customers, the information enables the management of their loyalty card, the attribution of points, and the validation of rewards. Data may also be used to communicate with users about the service, to inform them of updates or provide support. Finally, we use certain information for the continuous improvement of the application, in line with our legitimate interests and our legal and tax obligations.

Legal Basis for Processing

The processing of your personal data is based on several legal grounds: your consent, where necessary (for example, for certain email communications), the performance of the service contract when you use our application as a merchant or customer, and our legitimate interests related to optimizing and securing the service.

Data Retention

Your data is retained only for the time necessary to provide the service. When you delete your account, it may be retained for a maximum period of three years, in particular to meet our legal obligations and ensure continuity in the event of a dispute or claim. Beyond this period, your data is deleted or anonymized.

Data Sharing

We never sell your data to third parties. In certain cases, data may be shared only with our technical providers when strictly necessary to deliver the service. These providers are subject to confidentiality and security obligations equivalent to ours. Payments made as part of the subscription are processed by our partner Stripe, whose privacy policy you can consult directly on their website. View Stripe's privacy policy

Withdrawal of Consent

You can withdraw your consent at any time for certain uses of your data, especially for email communications. This withdrawal has no retroactive effect and therefore does not affect the lawfulness of processing carried out before your request.

Data Security

Kyvo implements all necessary technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include, in particular, data encryption, strict access control, and regular backups.

Your Rights

In accordance with the GDPR, you have a set of rights regarding your personal data. You can request access to the information we hold about you at any time, request the correction of inaccurate data, request its permanent deletion, restrict its processing in certain cases, or exercise your right to data portability. You also have the right to object to the processing of your data for reasons related to your particular situation. Finally, you have the right to lodge a complaint with the supervisory authority if you believe your rights have not been respected.

Cookies and Trackers

Our application uses only technical cookies and trackers that are essential for the proper functioning of the service. These cookies are necessary, for example, to keep your session active and ensure secure browsing. They are not used for advertising purposes and do not track you outside the application. Audience measurements may also be carried out using internal trackers, always with the sole aim of improving service quality. No advertising cookies or external tracking are installed without your explicit consent.

Policy Changes

This Privacy Policy may evolve to reflect changes in our practices or legislative developments. In the event of significant changes, we will inform you directly by email or via a notification in the application.

Contact

For any questions regarding this Privacy Policy or to exercise your rights, you can contact us by email at: support@kyvofidelity.fr