Privacy Policy

Last Updated: January 1st, 2025
Baby Sittor S.A.S. ("we," "us," or "BBS") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our BABY SITTOR mobile application and website.

1. Information We Collect

1.1 Personal Information
When you register and use our Services, we collect:
  • Identity information: First name, last name, date and place of birth
  • Contact information: Email address, telephone number, postal address
  • Account credentials: Login information (Facebook Connect or phone number via Account Kit)
  • Profile information: Profile picture, biography, preferences
  • Identity documents: To verify your identity and legal presence in France
1.2 Usage Information
We automatically collect:
  • Device information (type, operating system, unique device identifiers)
  • Log data (IP address, browser type, pages visited, time spent)
  • Location data (with your consent)
  • Cookies and similar tracking technologies
1.3 Content You Provide
  • Announcements and childcare requests
  • Messages exchanged with other Members
  • Ratings and reviews
  • Photos and documents you upload
1.4 Payment Information
When you use our payment services:
  • Credit card payments: We use Stripe to process payments. Card details are collected and stored by Stripe, not by us. We receive transaction confirmations and payment history.
  • Apple Pay: When you use Apple Pay, Apple does not share your actual card numbers with us. We receive a unique Device Account Number for processing. We collect transaction details (amount, date, time), billing information you provide, and transaction history.

2. How We Use Your Information

We use your information to:
  • Provide Services: Create and manage your account, facilitate connections between Parents and Babysitters, process payments and subscriptions
  • Communication: Send you service notifications, confirmations, updates, newsletters (with your consent)
  • Improve Services: Analyze usage patterns, develop new features, enhance user experience
  • Safety and Security: Verify identities, prevent fraud, enforce our Terms and Conditions
  • Legal Compliance: Comply with legal obligations, resolve disputes, enforce our agreements
  • Marketing: Send promotional offers and information about our services (with your consent)
2.1 Payment Data Usage
Payment information is specifically used to:
  • Process and complete your transactions
  • Send payment confirmations and receipts
  • Manage subscriptions and recurring payments
  • Prevent fraud and ensure transaction security
  • Comply with financial regulations (PCI-DSS)
  • Provide customer support for payment-related issues
  • Maintain transaction records for legal and accounting purposes

3. Legal Basis for Processing (GDPR)

We process your personal data based on:
  • Contractual necessity: To provide the Services you've requested
  • Legitimate interests: To improve our Services, prevent fraud, and ensure security
  • Legal obligations: To comply with applicable laws and regulations
  • Consent: For marketing communications and optional features (you can withdraw consent at any time)

4. How We Share Your Information

4.1 With Other Members
Your profile information, announcements, and ratings are visible to other Members to facilitate the matchmaking service.
4.2 With Service Providers
We share information with trusted third parties who assist us:
  • Stripe Payments Europe, Ltd: For payment processing (subject to Stripe's privacy policy: stripe.com/privacy)
  • Apple Pay: For Apple Pay transactions (subject to Apple's privacy policy: apple.com/legal/privacy)
  • Amazon Web Services (AWS): For hosting and data storage
  • Communication providers: For sending emails and SMS notifications
  • Analytics providers: To understand how our Services are used
These providers are contractually obligated to protect your data and use it only for specified purposes.
4.3 For Legal Reasons
We may disclose your information:
  • To comply with legal obligations, court orders, or government requests
  • To protect our rights, property, or safety, or that of our users or the public
  • In connection with fraud prevention or investigation
  • In case of merger, acquisition, or sale of assets (users will be notified)
4.4 With Your Consent
We may share your information for other purposes with your explicit consent.
We never sell your personal information to third parties for marketing purposes.

5. Payment Data Security and Storage

5.1 Security Measures
  • Payment card details are never stored on our servers
  • All payment data is encrypted using industry-standard SSL/TLS protocols
  • We comply with PCI-DSS (Payment Card Industry Data Security Standard) requirements
  • Stripe and Apple Pay use tokenization to protect card information
  • Regular security audits and vulnerability assessments
  • Access to payment systems is strictly controlled and monitored
5.2 Data Retention for Payments
  • Transaction records are retained for 7 years for accounting and tax compliance
  • Payment card tokens are stored by Stripe (if you consent) to facilitate future transactions
  • You can request deletion of stored payment methods at any time through your account settings
  • After account deletion, transaction records are anonymized but retained for legal purposes
5.3 International Transfers
Payment data may be transferred to:
  • Stripe's servers in the European Economic Area (EEA)
  • Apple's secure payment infrastructure
  • Our hosting provider AWS (with appropriate safeguards)
All international transfers comply with GDPR requirements through standard contractual clauses or adequacy decisions.

6. Data Security

We implement appropriate technical and organizational measures to protect your information:
  • Encryption of data in transit (HTTPS) and at rest
  • Secure authentication mechanisms
  • Regular security assessments and updates
  • Employee training on data protection
  • Access controls and monitoring systems
However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal data for as long as necessary to:
  • Provide our Services and maintain your account
  • Comply with legal obligations (e.g., 7 years for financial records under French Commercial Code)
  • Resolve disputes and enforce our agreements
When you delete your account, we will delete or anonymize your personal data, except:
  • Data required for legal compliance or dispute resolution
  • Anonymized data used for analytics and improvement
  • Transaction records retained for accounting purposes

8. Your Rights (GDPR & French Law)

Under French law ("Informatique et Libertés" of January 6, 1978) and GDPR, you have the right to:
8.1 Access
Request a copy of the personal data we hold about you
8.2 Rectification
Correct inaccurate or incomplete information
8.3 Erasure ("Right to be Forgotten")
Request deletion of your personal data (subject to legal retention obligations)
8.4 Restriction
Limit how we process your data in certain circumstances
8.5 Data Portability
Receive your data in a structured, machine-readable format
8.6 Object
Object to processing based on legitimate interests or for direct marketing
8.7 Withdraw Consent
Withdraw consent at any time (without affecting prior processing)
8.8 Lodge a Complaint
File a complaint with the French data protection authority (CNIL): www.cnil.fr
To exercise your rights:
  • Email us at: hello@babysittor.com
  • Write to us at: Baby Sittor S.A.S., 200 rue de la Croix Nivert, 75015 Paris, France
  • Delete your account directly through the app in "Edit my profile" section
We will respond to your request within one month.

9. Payment-Related Rights

Regarding payment data, you can:
  • Access your transaction history within the application
  • Request correction of billing information
  • Delete stored payment methods from your account
  • Request a copy of your payment records
  • Opt out of saving payment methods for future transactions
Contact hello@babysittor.com for payment-related data requests.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:
  • Recognize your device and maintain your session
  • Analyze usage and improve Services
  • Provide certain features and functionalities
Types of cookies we use:
  • Essential cookies: Strictly necessary for the Services to function
  • Analytics cookies: Help us understand how users interact with our Services
  • Preference cookies: Remember your settings and preferences
You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Services.
Note: Refusing essential cookies will prevent you from using the Services.
For more information about cookies, visit: www.allaboutcookies.org

11. Third-Party Services

Our Services integrate with third-party platforms:
We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Children's Privacy

Our Services are not intended for minors under 16 years of age (except Babysitters aged 16+). We do not knowingly collect personal information from children under 16 without parental consent.
If we become aware that we have collected data from a child under 16 without verification of parental consent, we will delete that information promptly.
Parents: If you believe your child has provided personal information to us, please contact us at hello@babysittor.com.

13. International Users

Baby Sittor is based in France and operates primarily within the European Union. Our servers are hosted by Amazon Web Services (AWS).
If you access our Services from outside the EU, your information will be transferred to and processed in France and may be subject to French and EU data protection laws.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:
  • Our Services or business practices
  • Legal or regulatory requirements
  • Technology and security measures
We will notify you of material changes by:
  • Posting the updated policy on our website and app
  • Updating the "Last Updated" date
  • Sending you an email notification (for significant changes)
Your continued use of our Services after changes constitutes acceptance of the updated Privacy Policy.

15. Data Protection Officer

For questions about data protection, contact our Data Protection team at:
  • Email: hello@babysittor.com
  • Address: Baby Sittor S.A.S., 200 rue de la Croix Nivert, 75015 Paris, France

16. CNIL Declaration

Our data processing activities are registered with the French Data Protection Authority (CNIL) under declaration number 1847709.

17. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices:
Email: hello@babysittor.com
Address: Baby Sittor S.A.S., 200 rue de la Croix Nivert, 75015 Paris, France
Website: www.babysittor.com

18. Apple Pay Specific Information

Apple Pay is provided by Apple Inc. and is subject to Apple's Privacy Policy. When you use Apple Pay:
  • Apple does not share your actual credit or debit card numbers with us
  • A unique Device Account Number is used to process payments
  • Your payment transaction history is stored by Apple and synced across your devices
  • For more information about Apple Pay privacy: apple.com/legal/privacy

19. Consent and Acknowledgment

By using our Services, you acknowledge that:
  • You have read and understood this Privacy Policy
  • You consent to the collection, use, and sharing of your information as described
  • You understand your rights and how to exercise them
  • For payment services, you explicitly consent to the processing of your payment data
---
Effective Date: January 1st, 2025
This Privacy Policy is available at: www.babysittor.com/en/privacy-policy