Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how Slaane SAS (“Slaane”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you use our website and platform (the “Platform”), and what rights you have under the EU General Data Protection Regulation (“GDPR”).

It applies to Clients who request services, Bookers who offer them, and visitors to the website. Slaane is a website only — there is no mobile app.

1. Data Controller

Slaane SAS, registered under SIREN 992 077 743

Registered office: 110 rue de Fontenay, 94300 Vincennes, France

Contact for all data-protection matters: frederick@slaane.com

2. What We Collect

All users

• Account data: first name, last name, email address (from your sign-in) and profile photo.
• Activity on the Platform: requests, offers, bookings and their status, messages, reviews, comments, Circle memberships and posts.
• Technical data: IP address, browser and device information, and error and security logs generated by our hosting providers when you use the website.
• Anonymous statistics and error reports: see section 6.

Clients

• Date of birth (required at sign-up) and, optionally, occupation and Instagram or LinkedIn links.

Bookers

• Date of birth, profession, company name and registration number, an identity document that you upload, and the profile you publish (bio, services, cities, photo).

We do not collect payment card or bank details, phone numbers or postal addresses, and we do not use geolocation. Slaane does not handle any payment between Clients and Bookers. We do not ask for sensitive (“special category”) data; please do not put such data in requests or messages.

3. Who Can See What

• A Client’s requests are public but anonymised (“Identity hidden”). The Client’s name and photo are revealed to approved Bookers and, once a service is accepted, to that Booker.
• A Client’s date of birth is visible only to the Client and Slaane’s administrators. Their age (calculated from it) is visible to approved Bookers.
• A Client’s public profile (first name, photo, occupation and links, number of requests) is visible to signed-in users.
• A Booker’s approved profile, offers and reviews are public. Their identity document is visible only to Slaane’s administrators, through short-lived secure links.
• Messages are visible only to the two people in the conversation.
• Bookings are visible only to the Client, the Booker and administrators.

4. Why We Process Your Data, and the Legal Basis

• To run the Platform (create your account, match Clients and Bookers, handle requests, offers, bookings, messages and reviews, send the service emails described below): performance of a contract (Art. 6(1)(b)).
• To verify Bookers (review of identity document and professional status by our team): legitimate interests in trust and safety (Art. 6(1)(f)).
• Security, fraud prevention and enforcement of our Terms: legitimate interests (Art. 6(1)(f)).
• Legal obligations such as responding to authorities and keeping records the law requires (Art. 6(1)(c)).

We do not send marketing emails, do not sell personal data and do not use it for advertising or profiling. We make no decisions about you by automated means that have legal or similarly significant effects.

5. Emails We Send

We send service emails when something happens in your account: a new message, a booking request or status change, a reply to your request, the approval or review of a Booker profile, a Circle request. They are sent through Resend. You choose which kinds of email you receive (messages, bookings, replies to your requests, comments, Circles, reviews and reminders) in your profile settings, and every email has a link to those settings. Decisions about a booker application are always emailed, because they affect your access to the Platform.

6. Cookies and Similar Technologies

We use only strictly necessary storage: your sign-in session (managed by Clerk and Firebase), and a few items in your browser that remember the page you came from after signing in, a request you were drafting, and how to display your name in the header. We use no analytics, advertising or tracking cookies, so no consent banner is needed. If this changes, we will update this Policy and ask for your consent first.

Anonymous statistics. To see which pages are useful, our own server counts page views and a few clicks (for example “Sign in” or “Apply as a booker”). Each count is a bare number added to a daily total, with the page name, whether the device is a phone or a computer, and a broad category for where the visitor came from (direct, search, social media or other site). We do not use cookies or identifiers for this, we do not store IP addresses or the address of the page you came from, and we cannot tell visitors apart or follow anyone from page to page. If your browser sends “Do Not Track” or Global Privacy Control, we do not count your visit at all. The legal basis is our legitimate interest in improving the Platform.

Error reports. If a page of the website crashes, your browser sends us the error message, the page it happened on and your browser type so we can fix it. These reports contain no account data and are kept in our server logs for the retention period set by our hosting provider.

7. Who We Share Data With

We share data only with the providers that run the Platform, under written agreements:

• Google Cloud / Firebase — database, file storage, server functions and hosting (data is stored in Europe; some processing takes place in the United States).
• Vercel Inc. — hosting and delivery of the website.
• Clerk — sign-in (email and one-time code).
• Resend — delivery of service emails.

We may also disclose data to public authorities where the law requires it, and to advisers (lawyers, auditors) under confidentiality.

8. Transfers Outside the EEA

Some of these providers process data in the United States. Such transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision (for example the EU–US Data Privacy Framework) where the provider is covered. You can ask us for details.

9. How Long We Keep Data

• Your account data is kept until you delete your account.
• When you delete your account, we remove your profile, your own requests and offers, and the files you uploaded (including photos and identity documents), and we cancel bookings still in progress.
• Booking records, messages and reviews exchanged with other users may be kept after deletion in anonymised form (your name and photo removed), and where necessary for legal obligations or to defend legal claims, for the period the law requires (typically up to 5 years for contractual data).
• Requests, offers and bookings that you “Remove” are archived, not deleted: they stay in your Archived section until you delete your account.
• Security and error logs kept by our hosting providers are retained for short periods defined by those providers.

10. Security

Data is encrypted in transit (HTTPS) and at rest by our cloud provider. Access is controlled by database security rules so that each person can read only what the rules allow (see section 3); identity documents are only accessible to administrators through short-lived links. We do not store passwords: sign-in uses a one-time code sent to your email. In the event of a personal data breach that presents a risk to you, we will notify the CNIL within 72 hours and inform you where required.

11. Your Rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16) — you can edit your profile at any time;
• have your data erased (Art. 17) — you can delete your account yourself from your profile page;
• restrict processing (Art. 18);
• receive your data in a portable format (Art. 20);
• object to processing based on legitimate interests (Art. 21).

To exercise a right, email frederick@slaane.com. We may ask you to confirm your identity. We answer within one month, which may be extended by two months for complex requests. We do not charge for standard requests.

12. Complaints

If you are not satisfied with our answer, you can lodge a complaint with the French data-protection authority, the CNIL (Commission Nationale de l’Informatique et des Libertés): www.cnil.fr.

13. Minors

The Platform is for adults: Clients and Bookers must be at least 18. We ask for your date of birth at sign-up and refuse registration under that age. We do not knowingly collect data from anyone younger; if you believe we have, contact us and we will delete it.

14. Changes to This Policy

We may update this Policy to reflect changes in our practices or in the law. Where a change is material, we will inform registered users by email before it takes effect, and we will update the date at the top.