Skip to content
biznessmatch.
Back

biznessmatch.

Privacy Policy

Version dated 16 July 2026

1. Data controller

The data controller is BIZNESSMATCH FRANCE, 3 bis rue de l’Isère, 38120 Saint-Égrève, France. For any question relating to your data, contact the Data Protection Officer (DPO) at dpo@biznessmatch.com.

2. Data collected

We collect the following categories of data:

  • Identification data: last name, first name, professional email address, phone number (optional), profile photo (optional), password (encrypted).
  • Company data: company name, SIRET, registered office address and contact details, business description, turnover, headcount, verification documents.
  • Connection data: IP address, device type, browser, login date/time, approximate location.
  • Payment data: Stripe customer ID, transaction history, invoices (bank details are managed by Stripe).
  • Usage data: messages exchanged, reviews, search history, profiles viewed.

3. Purposes and legal bases

Your data is processed for the following purposes and on the following legal bases:

  • Account creation and management, authentication, messaging, geolocation of services, payments — performance of the contract (Art. 6.1.b GDPR).
  • Invoicing and accounting record-keeping — legal obligation (Art. 6.1.c GDPR).
  • Security, fraud prevention, connection logs — legitimate interest (Art. 6.1.f GDPR).
  • Audience measurement, newsletter, SMS notifications — consent (Art. 6.1.a GDPR).
  • AI-driven matchmaking and profile enrichment: company descriptions and skills are processed by our subprocessor OpenAI to compute recommendations — performance of the contract.

4. Recipients and subprocessors

Your data is accessible to authorised staff of the Publisher and to the following subprocessors:

  • Subprocessors within the European Union (no transfer outside the EU): Scaleway (hosting, France), PostHog (audience measurement, EU), Sentry (technical monitoring, EU), BulkGate (SMS, EU).
  • Subprocessors outside the EU (transfers governed by the European Commission's Standard Contractual Clauses): Stripe (payments, USA), SendGrid/Twilio (emails, USA), Google — Analytics and Maps (audience measurement and mapping, USA), OpenAI (AI processing, USA), Cloudflare (security and CDN, USA).

5. Retention periods

  • User account: until the account is deleted.
  • Invoices and accounting data: 10 years (legal obligation).
  • Connection logs: 12 months.
  • Consent cookie: 13 months.

6. Your rights

In accordance with the GDPR, you have the rights of access, rectification, erasure, portability, objection and restriction. You can exercise these rights from your settings or by writing to dpo@biznessmatch.com.

You may also lodge a complaint with the CNIL (www.cnil.fr).

7. Security

We implement technical and organisational measures: password encryption, HTTPS, anti-bot protection (Cloudflare Turnstile), antivirus scanning of files, token-based authentication and role-based access management.

8. Changes

This policy may be updated. Any substantial change will be brought to your attention.