Privacy policy (GDPR)

The data controller is Veziro SASU, 15 Chemin du Tanit, Rés. Mas de Tanit, Bât TYR 402, 06160 Antibes, France. For any question about your personal data or to exercise your rights, contact contact -@- frenchrivierajobsservices.com.

Depending on how you use the platform, we may process:

• Account data: email address, name, chosen handle, preferred language, and account settings. If you sign in with Google or Facebook, we also receive the name, email address and profile picture your Google or Facebook account shares with us — never your password for that service.
• Business and verification data (Advertisers): legal name, address, SIRET and VAT number or the equivalent foreign company registration number, Facebook profile or page URL, and proof-of-registration documents (Kbis, avis SIRENE, or equivalent).
• Payment data: subscription and billing metadata. Card details are entered directly with our payment provider and are not stored by us.
• Content you publish: directory listing, logo, forum threads and replies, images (with EXIF/GPS metadata removed on upload), reviews, and requests for offer.
• Security and audit data: for security-relevant actions, your IP address, an approximate location derived from it, and your browser's user-agent. The location is looked up on our own servers in MaxMind's GeoLite2 database; your IP address is not sent to MaxMind.
• Cookies: strictly-necessary cookies (authentication session, language preference, your cookie choice) and, only with your consent, Google Analytics and PostHog audience-measurement and product-analytics cookies (see "Cookies").
• Technical error data: when something malfunctions, technical details of the error (stack trace, affected page, browser type, and your pseudonymous user id if you are signed in) are collected so we can fix it. Error reports never include your name, email address, or what you typed.

• Providing the platform (accounts, directory, forum, RFQ, subscriptions) — performance of the contract with you.
• Billing, invoicing and accounting, including retention of invoices and verification documents — compliance with our legal obligations.
• Security, fraud prevention and audit logging — our legitimate interest in keeping the platform safe.
• Automatic translation and spam screening of published content — forum threads and replies, job postings and service descriptions are machine-translated between French and English and given an automated spam/abuse score when they are published, so the community stays readable in both languages and moderators see abuse sooner. This is our legitimate interest in running a bilingual, moderated community; a high score only files a report for a human moderator — no decision with legal effect is taken automatically.
• Optional Google or Facebook login and marketing or notification emails — your consent, which you may withdraw at any time (each notification email includes an unsubscribe link).
• Audience measurement (Google Analytics) — your consent, which you may withdraw at any time via the "Cookies" link in the footer.
• Error monitoring and service reliability (Sentry) — our legitimate interest in keeping the platform working. Error reports use no cookies and no persistent identifier.
• Product analytics and session recordings (PostHog) — your consent, which you may withdraw at any time via the "Cookies" link in the footer.

We share data only as needed to run the service, with providers acting on our instructions:

• Stripe — payment processing and subscription management.
• Tiime — issuing compliant invoices.
• Hetzner Online GmbH — website hosting (servers located in Germany).
• Cloudflare, Inc. — object storage for uploaded files (private storage for registration documents, invoices, CVs and moderation evidence; a public bucket served from media.frenchrivierajobsservices.com for listing, forum, job and service images), plus the content-delivery network and proxy in front of the site, which processes IP addresses to route and protect traffic.
• OpenRouter, Inc. — routes the text of published content (forum, job and service posts) to the AI model provider selected by our staff (Google's Gemini models by default) for translation and spam screening. No account data, email address or IP address is sent with it.
• Our email provider — sending transactional and notification emails.
• Meta / Facebook — only if you choose to sign in with Facebook.
• Google (Google Ireland Limited) — audience measurement via Google Analytics, only after you consent.
• Functional Software, Inc. (Sentry) — error monitoring; event data is hosted in Sentry's European Union region.
• PostHog, Inc. — product analytics and session recordings on PostHog Cloud EU (Frankfurt), only after you consent.
• Company registries — the French company database (recherche-entreprises / INSEE), Companies House (United Kingdom), the Monaco trade register (Répertoire du Commerce et de l’Industrie) and the EU VIES service, queried with the information you enter to help complete your business details.
• Firecrawl (Mendable, Inc.) — only when a business owner asks us to import their own website: it fetches the public pages at the address they give, and the page text then goes to OpenRouter to draft the listing, which the owner reviews before anything is published. No visitor data, account data or IP address is sent with it.
• Géoplateforme (IGN, French State — data.geopf.fr) — the public French address service behind the office address autocomplete. It receives only the address text a business owner types, sent from our servers; no visitor data, account data or IP address is sent with it.

Some providers (for example our payment provider, or Google for audience measurement) may process data outside the European Economic Area (EEA), including in the United States. Sentry and PostHog are also United States companies, but they host the data described in this policy in their European Union regions; Cloudflare, OpenRouter and Firecrawl are United States companies too, and the text sent for translation or website import may be processed in the United States. Where a transfer outside the EEA does occur, it is governed by appropriate safeguards such as an adequacy decision (e.g. the EU–US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.

• Account data: for as long as your account exists, then deleted or anonymised within a reasonable period.
• Invoices and verification documents: retained for 10 years, as required by French commercial and tax law.
• Security and audit logs: kept for a limited period appropriate to their security purpose.
• Published content: kept while your account is active; you may delete your content, or delete your account yourself (see "Your rights").
• Error reports and error-linked session replays (Sentry): retained for 90 days.
• PostHog session recordings: retained for up to 30 days; aggregated product-analytics events for as long as we need audience statistics.

When you apply to a job posting through the platform, we collect your CV file, an optional cover note, and a snapshot of your contact details (name, email address and phone number) at the time you apply.

• Who receives it: only the named business you applied to, through its application inbox.
• Storage: your CV and application details are held in private storage and are never publicly accessible.
• Retention: an application is kept for 12 months after the job posting closes, then automatically deleted; you may withdraw an application at any time from your dashboard, which deletes it immediately.
• Reusable CV: if you save a CV to your profile so you can apply in one click, it is kept until you replace or delete it yourself.

Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of your data, and the right to data portability. You may also withdraw consent where processing is based on consent.

To exercise these rights, contact contact -@- frenchrivierajobsservices.com. You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

Downloading your data: signed in, open Profile & security in your dashboard and choose Download my data. You receive a machine-readable JSON file with your account details, sign-in methods, contact addresses, notification settings, terms acceptance, forum threads and replies, reviews, quote requests, job applications (with the names of the CV files you uploaded) and your account's security log. Other people's personal data is not included.

Deleting your account yourself: on the same page, choose Delete my account. We email a confirmation link to your login address; the deletion happens only once you confirm on the page it opens, while signed in. Your account, profile, contact addresses and sign-in methods are deleted immediately, together with your forum photos, your reviews, your quote requests, your job applications and every CV file you uploaded. Your forum threads and replies stay visible so that other members' replies keep their context, but they are shown as written by "Deleted member", with no name, handle or link to you; a thread of yours that nobody else has replied to is deleted. The security log of your account is kept for a limited period for security purposes, and the deletion itself is recorded without your name or email address. An account that owns a business or belongs to a business's team cannot be deleted this way, because invoices and business verification documents must be kept for 10 years (see "Data retention"): write to us instead and we will close the listing and remove the personal data those records do not require.

By email: you can also write to contact -@- frenchrivierajobsservices.com from the address on the account (for an account created with Google or Facebook, mention the name of that account) to request a copy of your data or the deletion of your account. We confirm the request and delete the account and the data attached to it within 30 days, except what the law requires us to keep (see "Data retention").

We take appropriate technical and organisational measures to protect your data, including encrypted transport (HTTPS), hashed passwords, private storage of uploaded files, and removal of EXIF/GPS metadata from uploaded images. No system can be guaranteed perfectly secure, but we work to reduce the risks.

We use three kinds of cookies:

• Strictly-necessary cookies — the authentication session cookie that keeps you signed in, the cookie that remembers your language preference, and the cookie that records your cookie choice. These are essential to provide a service you have requested and require no consent.
• Audience measurement (Google Analytics) — with your consent only, we use Google Analytics 4, provided by Google Ireland Limited, to understand how the site is used (pages viewed, approximate location, browser and device type, via pseudonymous identifiers). Audience-measurement data is retained by Google Analytics for up to 14 months.
• Product analytics and session recordings (PostHog) — with your consent only, we use PostHog (EU Cloud) to understand how the product is used and, during limited observation windows, to record sessions in which all form input is masked. Files you upload (CVs, identity documents) are never recorded.

Google Analytics is integrated through Google Consent Mode v2: no analytics cookie is set unless you accept, and your consent status (granted or denied) is signalled to Google through its consent API. If you decline, only cookieless, aggregated technical signals carrying that consent status are sent.

You can change your choice at any time via the "Cookies" link in the site footer, which reopens the consent banner. Declining has no impact on your use of the platform.

Error monitoring (Sentry) works without cookies and without your consent, under our legitimate interest: it only records technical details when something breaks. If you have accepted cookies, an error may also attach a short recording of what happened on your screen just before it, with everything you typed hidden.

The platform is intended for professionals and adult members and is not directed at children. We do not knowingly collect data from minors.

We may update this policy to reflect changes in our services or in the law. The date at the top of the page indicates the latest version.