Privacy policy

The data controller is Excelsior Digital, an individual business, 44 avenue Jean-François Raclet, 69007 Lyon, France. SIREN 829 149 400 · SIRET 829 149 400 00022 · VAT number FR00829149400 · contact@excelsior-code.fr. For privacy requests, contact contact@excelsior-code.fr.

Depending on how you use Revy, we may process:

• Account data such as your email address, name and Clerk account identifier.
• Guest-session, bag, favourites and collection data linked to a browser session or account.
• Checkout and delivery information, including email, name, postal address and order details.
• Payment and refund references received from Stripe. We do not store complete card details.
• Messages or information you send to support, plus technical information such as IP address, browser and security logs supplied by hosting or infrastructure providers.

We use this data to provide the marketplace and fulfil orders (contract), process payments and comply with accounting or legal duties (legal obligation), secure and improve the service and prevent abuse (legitimate interests), and respond to requests (contract or legitimate interests). We do not use personal data for targeted advertising.

We share the minimum data needed with providers that help us operate Revy, including Clerk for authentication, Stripe for payments, MongoDB Atlas for application data, Vercel for hosting and AWS services for certain file storage or delivery functions. Providers may process data in countries outside the European Economic Area under applicable contractual or legal safeguards.

We keep account and order information for as long as needed to provide the service and meet legal, accounting and dispute-resolution obligations. Guest sessions expire according to the service configuration (30 days by default). We delete or anonymise information when it is no longer needed, unless the law requires a longer period.

Subject to legal limits, you may request access, correction, deletion, restriction, portability or objection to processing. You may withdraw consent where processing is based on consent. Write to contact@excelsior-code.fr and include enough information for us to identify your request. You may also complain to the French data-protection authority (CNIL) or the authority in your place of residence.

We use access controls, encrypted connections and provider security measures appropriate to the service, but no online service is risk-free. Product pages may link to a maker’s external shop. That shop is a separate controller and its own privacy policy applies when you leave Revy.