Culture GuidesDécouvrir l’app

Privacy Policy

Last updated: 17 September 2026

1. Data controller

Culture Guides operates the mobile application and the culture-guides website. For any question about your data: contact@culture-guides.com.

2. Data we collect

  • Account: email address, name, preferred language.
  • Guides: public introduction, city, specialities, SIRET business number, professional card, liability insurance certificate and identity document.
  • Bookings: booked offer, time slot, number of participants, amount, status.
  • Messaging: message content, reports and blocks.
  • Reviews: rating and comment published after a tour.

We never collect or store card details: they are handled directly by Stripe.

3. Purposes and legal bases

  • Performance of the contract: account, booking, payment, messaging.
  • Legal obligation: verification of guides, invoicing, platform reporting duties.
  • Legitimate interest: security, fraud prevention, content moderation.

4. Recipients and processors

  • Stripe Payments Europe, Ltd. — payment, identity verification of guides and payouts.
  • Supabase, Inc. — database and document hosting on infrastructure located in the European Union (Paris region).
  • Vercel, Inc. — website hosting.
  • Apple, Inc. — distribution of the app through the App Store.

Verification documents are accessible only to the guide concerned and to the Culture Guides validation team. They are never public.

5. Retention periods

  • Account: until deleted by the user.
  • Verification documents: for the duration of the activity, then deleted.
  • Bookings and accounting records: 10 years, as required by law.
  • Messages: 3 years after the last exchange.

6. Your rights

You have the right to access, rectify, erase, restrict, object and port your data. Account deletion is available directly in the app, in the Profile tab. You may also write to contact@culture-guides.com or lodge a complaint with the French data protection authority (CNIL).

7. Security

All traffic is encrypted (HTTPS), data access is partitioned per user, and sensitive documents are stored in a private space reachable only through a temporary link.