Privacy Policy

Roctify is a trade name of Moad DAFIR, sole trader (entrepreneur individuel) registered in France under SIRET 102 586 344 00016, whose address is 5 rue Pablo Neruda, 78570 Andrésy, France. Email: [email protected].

Roctify is the data controller for the data described in this policy, except for the data of the customers and visitors of the pages and stores created by our users, for which Roctify acts as a processor (see section 4).

We only collect the data we need, and mostly the data you give us.

When you visit roctify.com - Contact form: first and last name, email address, phone number, company name and your message. - Newsletter: your email address, if you subscribe. - Cookies: technical cookies and, with your consent, audience measurement cookies. See our Cookie Policy.

When you create and use a Roctify account (on the web or in the iOS app) - Account data: name, email address, password (stored only in encrypted, hashed form), language, currency and the information you share when signing up (for example the type of activity and how you heard about us). - Your content: link in bio pages, stores, products, prices, photos and files you upload, pages, discounts, forms and settings. - Payment settings: the payment methods you offer, including the bank details you choose to display to your buyers for bank transfers. Connections to Stripe or PayPal are made directly with these providers. - Messages and emails: the email campaigns you write and send, and the messages you exchange with your buyers from your inbox. - Subscription and billing: your plan, billing history and invoices. Card payments are handled by Stripe; Roctify never stores your card number. - Technical and security data: IP address, connection logs and security checks (Cloudflare Turnstile at sign-up and sign-in) used to protect accounts and prevent abuse.

We do not collect sensitive data (health, political opinions, religious beliefs, sexual orientation, biometric data, etc.) and we do not use your data for automated decision-making.

The Roctify app gives you access to your Roctify account on your iPhone. It shows the same data as app.roctify.com and collects no other data.

• No advertising and no tracking: the app contains no advertising, no third-party analytics or crash-reporting tools, and does not track you across apps or websites.
• On your device: the app only keeps your session cookies (so you stay signed in) and your display preferences, such as dark mode.
• Permissions: the app does not access your location or your contacts. Photos are only sent when you choose to upload them.
• Subscriptions: no purchase is made in the app. Plans are managed on our website.

The pages and stores you create with Roctify collect data about your buyers and visitors: names, email addresses, phone numbers, shipping and billing addresses, orders, messages, form answers and newsletter subscriptions.

For this data, you are the data controller and Roctify acts as your processor within the meaning of article 28 of the GDPR. As such, Roctify: - processes this data only to provide the Services and on your documented instructions; - ensures that the people authorised to access it are bound by confidentiality; - applies appropriate technical and organisational security measures; - only uses the processors listed in section 6, which are bound by equivalent obligations; - helps you respond to requests from your buyers and informs you without undue delay of any personal data breach; - deletes the data at the end of the Services, subject to the legal retention obligations described in section 8.

You remain responsible for informing your buyers and visitors, in particular in your own privacy notice. Buyers who want to exercise their rights should contact the merchant, who controls their data.

Visitor statistics on Roctify pages are measured without cookies: we use a daily rotating anonymous identifier and keep no persistent identifier, so no consent banner is needed for them.

Service emails (sign-up confirmation, password reset, order notifications, security alerts) are necessary to provide the Services and are sent even if you do not subscribe to our newsletter.

Your data is intended for Roctify. We never sell or rent your data. We share it only with the service providers we need to run the Services, acting as our processors:

We may also disclose data when the law requires it, for example at the request of a judicial authority.

Some providers may process data outside the European Economic Area, in particular in the United States. These transfers are covered by the European Commission's adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, for certified providers, and by the European Commission's standard contractual clauses.

You can ask to delete your account at any time from your profile, on the web or in the iOS app (Menu > Account). Your account, your pages, your stores and their data are permanently deleted 30 days after your request. Until then, you can cancel the request from the same page.

Some data is kept after deletion when the law requires it, for example invoices, as described in section 8.

We protect your data with appropriate technical and organisational measures: encrypted connections (HTTPS), passwords stored only in hashed form, restricted access, protection against automated abuse, regular updates and backups. No system is completely secure, but we work to protect your data and to inform you promptly if a breach affects it.

You have the right to access your data, to rectify it, to erase it, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting the processing carried out before. You can also give instructions on what happens to your data after your death.

You can view and change most of your data directly in your account. For any other request, write to [email protected]. We may ask you to prove your identity. We answer within one month, which may be extended by two months for complex requests.

You can also lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

The Services are intended for adults. A Roctify account can only be created by a person aged 18 or over, or by a minor with the authorisation of a parent or legal guardian, as set out in our Terms of Service. We do not knowingly collect data from children under 16 without such authorisation, and we delete it if we learn that it has been collected.

We may update this Privacy Policy, for example when we add a feature or a provider. The date of the latest update is shown at the top of this page. If a change significantly affects how we use your data, we will inform you by email or in your account.

For any question about this policy or your personal data, write to [email protected] or by post to Moad DAFIR (Roctify), 5 rue Pablo Neruda, 78570 Andrésy, France.