Privacy Policy

Processed data

Data you provide to us or that the service processes on your behalf

Depending on the features you use, this may include:

• Merchant account data, including your email address, session identifiers, and information required for authentication
• Data submitted through our forms, including email, message, appointment date or time, shop address, and optional notes
• Business data related to your use of Nearby, such as shop profile, product catalog, images, invoices, POS synchronizations, orders, and, when you connect them, some customer data required to operate the service

Main processors and providers

Technical providers

Depending on the features you use, we may rely in particular on:

• Supabase (authentication and database), OVH (hosting), Stripe (subscriptions or payments), Shopify and Square (POS integrations and billing depending on channel), OpenAI, Fashn.ai, Mistral, or Google Gemini (some AI features), and Nominatim/OpenStreetMap (address search). Some of these providers may operate from or transfer data to countries outside the European Union.

Supabase privacy policy: https://supabase.com/privacy

Cookies and local storage

We use technical cookies and local browser storage to:

• Maintain authentication, secure some connections with third-party services, and support some admin or installation sessions
• Remember consent choices, some technical preferences, and the browser-side local web session

On marketing pages, Google Analytics 4 and Google Ads are activated only after your consent. They may be used to measure traffic, conversions, campaign performance, and, if you accept it, ad personalization.

Deleting this data through your browser may log you out or reset some preferences.

Purposes and legal bases

We process your data in particular to:

• Provide the requested service (account creation, authentication, synchronization with third-party services, support, appointments, image processing, invoice extraction, subscription management)
• Ensure security, prevent abuse, manage billing, respond to your requests, and comply with our legal obligations
• Measure audience and marketing conversions when you consent, including through Google Analytics 4 and Google Ads

When you import data relating to your own customers into Nearby, you remain responsible for the legal basis, the information provided to those individuals, and your own obligations as data controller.

Data retention

• Retention periods vary depending on purpose: account data for the life of the account and the management of related obligations; contact requests and appointments for the time needed to handle them and, as a rule, up to 2 years after the last exchange; technical data and logs for limited periods compatible with operation, security, and legal obligations; business data for as long as your account and use of the service require it, unless deleted or subject to another legal obligation

Your rights

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right of rectification: correct inaccurate data
• Right to erasure: request deletion of your data
• Right to object: object to processing of your data
• Right to portability: receive your data in a structured format
• Right to withdraw consent when processing is based on consent

To exercise your rights, contact us via the Contact page and provide your identity and request. We may ask for additional information to verify your identity.

Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, destruction, or alteration.

Policy changes

We reserve the right to modify this privacy policy at any time. Changes take effect upon publication on this page. We encourage you to review this page regularly.

Contact

For any questions regarding this privacy policy or exercising your rights, please contact us via the Contact page .

In case of a dispute, you may also file a complaint with the CNIL (French data protection authority).