Privacy Policy

When you register and use our Services, we collect:

• Identity information: First name, last name, date and place of birth
• Contact information: Email address, telephone number, postal address
• Account credentials: Login information (Facebook Connect or phone number via Account Kit)
• Profile information: Profile picture, biography, preferences
• Identity documents: To verify your identity and legal presence in France

We automatically collect:

• Device information (type, operating system, unique device identifiers)
• Log data (IP address, browser type, pages visited, time spent)
• Location data (with your consent)
• Cookies and similar tracking technologies

When you use our payment services:

• Credit card payments: We use Stripe to process payments. Card details are collected and stored by Stripe, not by us. We receive transaction confirmations and payment history.
• Apple Pay: When you use Apple Pay, Apple does not share your actual card numbers with us. We receive a unique Device Account Number for processing. We collect transaction details (amount, date, time), billing information you provide, and transaction history.

Babysitters may, on an optional basis, submit their Criminal Record Certificate No. 3 (B3), as the official PDF issued by casier-judiciaire.justice.gouv.fr. This PDF is analysed automatically on our own servers, without being sent to any artificial intelligence provider, to check that it is an official, recent B3 in the Babysitter's name and that it is clean. Where the automated analysis is inconclusive, the document is reviewed by an authorised member of the Babysittor team and deleted as soon as a decision is made. The document is never recorded in our database: only the result of the check and its dates are recorded. You may at any time request that this result be reviewed by a member of the Babysittor team by writing to contact@babysittor.com.

Before they are sent to Stripe Identity, the photos of the ID document uploaded by Babysitters are checked automatically (document type, legibility, sides present, expiry date, consistency of the date of birth with the profile) using an artificial intelligence model (Claude, by Anthropic) run by Amazon Web Services (Amazon Bedrock) in the European Union. This check may lead us to ask you for another document (expired, illegible, missing side); it never decides on its own to suspend an account: in case of inconsistency, the document is reviewed by an authorised member of the Babysittor team and deleted as soon as a decision is made. No data from this check is recorded in our database. This processing is based on our legitimate interest in preventing fraud and protecting the children cared for (Article 6(1)(f) GDPR).

We use your information to:

• Provide Services: Create and manage your account, facilitate connections between Parents and Babysitters, process payments and subscriptions
• Communication: Send you service notifications, confirmations, updates, newsletters (with your consent)
• Improve Services: Analyze usage patterns, develop new features, enhance user experience
• Safety and Security: Verify identities, prevent fraud, enforce our Terms and Conditions
• Legal Compliance: Comply with legal obligations, resolve disputes, enforce our agreements
• Marketing: Send promotional offers and information about our services (with your consent)

Payment information is specifically used to:

• Process and complete your transactions
• Send payment confirmations and receipts
• Manage subscriptions and recurring payments
• Prevent fraud and ensure transaction security
• Comply with financial regulations (PCI-DSS)
• Provide customer support for payment-related issues
• Maintain transaction records for legal and accounting purposes

We process your personal data based on:

• Contractual necessity: To provide the Services you've requested
• Legitimate interests: To improve our Services, prevent fraud, and ensure security
• Legal obligations: To comply with applicable laws and regulations
• Consent: For marketing communications and optional features (you can withdraw consent at any time)

B3 check: this processing is based on our legitimate interest in protecting the children cared for through the platform (Article 6(1)(f) GDPR). Submitting the B3 is optional. As this concerns data relating to criminal convictions (Article 10 GDPR), processing is strictly limited to the result of the check (clean: yes / no) and its date, and the document is not retained.

Your profile information, announcements, and ratings are visible to other Members to facilitate the matchmaking service.

We share information with trusted third parties who assist us:

• Stripe Payments Europe, Ltd: For payment processing (subject to Stripe's privacy policy: stripe.com/privacy)
• Apple Pay: For Apple Pay transactions (subject to Apple's privacy policy: apple.com/legal/privacy)
• Amazon Web Services (AWS): For hosting and data storage
• Stripe Identity: For verifying Babysitters' ID documents (subject to Stripe's privacy policy: stripe.com/privacy)
• Brevo (Sendinblue SAS, France): For sending our emails and newsletters (subject to Brevo's privacy policy: brevo.com/legal/privacypolicy)
• Callr (France): For sending booking confirmation SMS to Babysitters
• Google Workspace: For our customer support email (subject to Google's privacy policy: policies.google.com/privacy)
• Amplitude: For measuring app usage (subject to Amplitude's privacy policy: amplitude.com/privacy)
• Google Firebase: For mobile app audience measurement (subject to Firebase's privacy policy: firebase.google.com/support/privacy)
• Google Analytics (GA4): For audience measurement and site usage analysis (subject to Google's privacy policy: policies.google.com/privacy)
• Meta / Facebook Pixel: For advertising performance measurement (subject to Meta's privacy policy: www.facebook.com/policy.php)
• Google Ads: For advertising and remarketing (subject to Google's privacy policy: policies.google.com/privacy)
• Amazon Web Services – Amazon Bedrock (European Union): For automated processing using artificial intelligence: moderation of profile photos and photos sent in the messaging service, automated summary of a profile's reviews, pre-check of Babysitters' ID documents, and assistance in drafting our customer support replies. The models used (Claude, by Anthropic) are run by AWS in European Union regions; the data is not used to train the models and is not retained by the service.
• Slack (Slack Technologies): Internal communication tool of the Babysittor team, used in particular for the human review of documents (B3, ID document) that require it; these documents are deleted as soon as a decision is made.

These providers are contractually obligated to protect your data and use it only for specified purposes.

We may disclose your information:

• To comply with legal obligations, court orders, or government requests
• To protect our rights, property, or safety, or that of our users or the public
• In connection with fraud prevention or investigation
• In case of merger, acquisition, or sale of assets (users will be notified)

We may share your information for other purposes with your explicit consent.

Payment data may be transferred to:

• Stripe's servers in the European Economic Area (EEA)
• Apple's secure payment infrastructure
• Our hosting provider AWS (with appropriate safeguards)

All international transfers comply with GDPR requirements through standard contractual clauses or adequacy decisions.

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit (HTTPS) and at rest
• Secure authentication mechanisms
• Regular security assessments and updates
• Employee training on data protection
• Access controls and monitoring systems

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain your personal data for as long as necessary to:

• Provide our Services and maintain your account
• Comply with legal obligations (e.g., 7 years for financial records under French Commercial Code)
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal data, except:

• Data required for legal compliance or dispute resolution
• Anonymized data used for analytics and improvement
• Transaction records retained for accounting purposes

B3 check: the submitted document is never recorded in our database; where it must be reviewed by a person, it is deleted as soon as a decision is made. The result of the check and its dates are kept for 6 months; a new check is then requested from the Babysitter.
ID document pre-check: no data is kept by Babysittor after the check (the document is then processed by Stripe Identity under its own policy).

Under French law ("Informatique et Libertés" of January 6, 1978) and GDPR, you have the right to:

8.1 Access
Request a copy of the personal data we hold about you

8.2 Rectification
Correct inaccurate or incomplete information

8.3 Erasure ("Right to be Forgotten")
Request deletion of your personal data (subject to legal retention obligations)

8.4 Restriction
Limit how we process your data in certain circumstances

8.5 Data Portability
Receive your data in a structured, machine-readable format

8.6 Object
Object to processing based on legitimate interests or for direct marketing

8.7 Withdraw Consent
Withdraw consent at any time (without affecting prior processing)

8.8 Lodge a Complaint
File a complaint with the French data protection authority (CNIL): www.cnil.fr

We will respond to your request within one month.

Regarding payment data, you can:

• Access your transaction history within the application
• Request correction of billing information
• Delete stored payment methods from your account
• Request a copy of your payment records
• Opt out of saving payment methods for future transactions

Contact contact@babysittor.com for payment-related data requests.

We use cookies and similar technologies to:

• Recognize your device and maintain your session
• Analyze usage and improve Services
• Provide certain features and functionalities

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Services.

Note: Refusing essential cookies will prevent you from using the Services.

For more information about cookies, visit: www.allaboutcookies.org

Our marketing emails may contain a "tracking pixel" (an invisible image) that tells us whether an email has been opened. We use it for two purposes:

You can object to this tracking at any time: by setting your email client not to load images automatically, by writing to us at contact@babysittor.com, or by unsubscribing from our communications. Withdrawing consent is as easy as giving it.

Our Services integrate with third-party platforms:

• Facebook Connect: For account creation (subject to Facebook's privacy policy)
• Stripe: For payment processing (terms at stripe.com/privacy)
• Apple Pay: For mobile payments (terms at apple.com/legal/privacy)
• Google Analytics (GA4): For audience measurement and site usage analysis (subject to Google's privacy policy: policies.google.com/privacy)
• Meta / Facebook Pixel: For advertising performance measurement (subject to Meta's privacy policy: www.facebook.com/policy.php)
• Google Ads: For advertising and remarketing (subject to Google's privacy policy: policies.google.com/privacy)
• Amazon Web Services – Amazon Bedrock (European Union): For automated processing using artificial intelligence: moderation of profile photos and photos sent in the messaging service, automated summary of a profile's reviews, pre-check of Babysitters' ID documents, and assistance in drafting our customer support replies. The models used (Claude, by Anthropic) are run by AWS in European Union regions; the data is not used to train the models and is not retained by the service.

We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

Our Services are not intended for minors under 16 years of age (except Babysitters aged 16+). We do not knowingly collect personal information from children under 16 without parental consent. In addition, when posting a request, Parents may provide information about the children they are seeking care for: first name, age, and optionally a photo. In the listing description, Parents may provide information useful to the child's safety (allergies, special needs). This information is provided by the Parent, under their responsibility, and is visible only to Babysitters applying to the relevant listing. We process this data on the basis of legitimate interest in ensuring the child's safety during care (Article 6.1.f GDPR) and, for data that may relate to health (allergies), on the basis of the Parent's consent when voluntarily providing it (Article 9.2.a GDPR). This data is retained for the duration of the matching process and remains visible in the listing. Once a candidate is confirmed, only that candidate retains access to it. It is never shared with third parties beyond the Babysitters applying to the relevant care request.

If we become aware that we have collected data from a child under 16 without verification of parental consent, we will delete that information promptly.

Parents: If you believe your child has provided personal information to us, please contact us at contact@babysittor.com.

Babysittor is based in France and operates primarily within the European Union. Our servers are hosted by Amazon Web Services (AWS).

If you access our Services from outside the EU, your information will be transferred to and processed in France and may be subject to French and EU data protection laws.

Some of our service providers are established in the United States or may process data there: Slack (internal communication tool), Google (Workspace, Firebase, Google Analytics, Google Ads), Amplitude and Meta. These transfers are governed by the EU–US adequacy decision (Data Privacy Framework) where the provider is certified, or otherwise by a data processing agreement (DPA) incorporating the standard contractual clauses adopted by the European Commission. Artificial intelligence processing (Amazon Bedrock) is carried out in European Union regions.

We may update this Privacy Policy from time to time to reflect changes in:

• Our Services or business practices
• Legal or regulatory requirements
• Technology and security measures

We will notify you of material changes by:

• Posting the updated policy on our website and app
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of our Services after changes constitutes acceptance of the updated Privacy Policy.

For questions about data protection, contact our Data Protection team at:

• Email: contact@babysittor.com
• Address: Babysittor S.A.S., 19 rue du Sacré-Cœur, 33200 Bordeaux, France

Our personal data processing activities are carried out in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act. Under these rules, the prior declaration regime with the CNIL was abolished as of 25 May 2018. You can exercise your rights and find details of our processing in our Privacy Policy.

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

Email: contact@babysittor.com
Address: Babysittor S.A.S., 19 rue du Sacré-Cœur, 33200 Bordeaux, France
Website: www.babysittor.com

Apple Pay is provided by Apple Inc. and is subject to Apple's Privacy Policy. When you use Apple Pay:

• Apple does not share your actual credit or debit card numbers with us
• A unique Device Account Number is used to process payments
• Your payment transaction history is stored by Apple and synced across your devices
• For more information about Apple Pay privacy: apple.com/legal/privacy

By using our Services, you acknowledge that:

• You have read and understood this Privacy Policy
• You consent to the collection, use, and sharing of your information as described
• You understand your rights and how to exercise them
• For payment services, you explicitly consent to the processing of your payment data

---

Effective Date: January 1st, 2026

This Privacy Policy is available at: www.babysittor.com/en/privacy-policy