Privacy Policy and Personal Data

micropreneurs.org — Last updated: August 2026

1. Data Controller

The controller for personal data processing is Nicolas Rafin, sole proprietor, publisher of micropreneurs.org (see legal notices). For any GDPR-related questions, you can contact us at contact@micropreneurs.org.

2. Purposes of Data Processing

Your data is collected and processed for the following purposes:

• Account management: account creation, authentication, profile (name, email address, individual / pro role, geolocation to determine your position relative to pros). The email is required for account creation and service-related communications.
• Matching: search for professionals (category, location, radius filters), display of pro profiles, contact, and messaging between individuals and pros.
• Messages and conversations: messages are sent via email directly to the professional; subsequent conversations will take place between the two parties within their respective private domains.
• Geolocation: when you choose to use "my position" on the search or home page, your position (latitude/longitude) is used solely to display nearby professionals. Refusing geolocation does not impact the use of the site (postal code search is available).
• Approximate position (IP): in the absence of a postal code and without using geolocation, an approximate position can be deduced from your IP address to suggest a default postal code.
• Professional data: pros provide their identity (first name, last name), company name, business registration number, postal address, postal code, phone number, trade(s), indicative pricing, professional insurance, diplomas, photos (profile and past work). This data is processed for matching, verification (business registration), and displaying the profile to individuals.
• Subscription and billing: management of the pro trial and subscription (via payment provider; no card data is stored on our servers).
• Ratings and reviews: recording of ratings and comments after exchanging contact details (pro and app).
• Notifications: sending transactional emails (new message, reminders if configured) and, if you enable alerts in the installed app (PWA), push notifications on your device.
• Moderation and administration: statistics, deactivation of profiles in case of abuse, compliance, and security.

3. Legal Basis and Consent

Processing is carried out based on the performance of the contract (account, matching), consent when required (geolocation, newsletter if offered), and legitimate interest for the security and improvement of the service. Upon registration, acceptance of this policy constitutes your consent to the processing of your data within this framework. Geolocation is only used after your explicit action (clicking on "Use my position") and within the framework described above.

4. Cookies and Trackers

Le site distingue trois niveaux, via le bandeau de consentement (cookie mp_consent, 13 mois) : (1) essentiels — session, CSRF, sécurité, langue, et le cookie d’attribution de parrainage professionnel mp_pro_ref (HttpOnly, 30 jours, uniquement si vous ouvrez un lien /p/{code}) ; (2) statistiques first-party (événements /api/collect, sans publicité) ; (3) marketing (balises Google Ads). Aucun traceur statistique ou publicitaire n’est déposé avant votre choix. Vous pouvez modifier ce choix en effaçant les cookies du site. Les visites de pages sont comptées avec une empreinte HMAC de l’adresse IP (pas d’IP en clair), conservée 13 mois maximum.

4 bis. Processors

The following providers process data on our behalf: OVH (hosting, EU), Stripe (pro subscription payment — no card is stored on our servers), Google (potential OAuth authentication, Gemini for writing assistance features, Ads tags only if you accept marketing). A data processing agreement or standard contractual clauses apply depending on the provider.

5. Retention Period

• Active account: account and profile data kept as long as the account is active.
• Account deletion: upon your request, the account is anonymized (email replaced, pro contact details erased, tokens revoked, profile unpublished) and then marked as deleted. A daily purge finalizes accounts deleted for more than 30 days. Certain data may remain anonymized for legal or statistical obligations.
• Messages and conversations: kept as long as the account exists; if the account is deleted, messages may be anonymized (removal of the link to your identity) to preserve the history on the professional's side.
• Reviews: reviews remain displayed in an anonymized manner after account deletion, unless otherwise requested.

6. Your Rights (GDPR)

You have the following rights:

• Right of access: obtain a copy of the data we hold about you.
• Right of rectification: correct inaccurate data (from your profile or by contacting us).
• Right to erasure: request the deletion of your account and data (possible via "Delete my account" in the profile settings).
• Right to data portability: receive your data in a structured format ("Download my data" button in the profile).
• Right to object / restriction: in cases provided for by regulations, you can object to processing or request its restriction.

To exercise these rights, use the features provided in your account area (profile: access, rectification, data download, account deletion) or contact us at contact@micropreneurs.org. You can also lodge a complaint with the relevant data protection authority (such as the CNIL at www.cnil.fr).

7. Security

Data is protected by appropriate technical and organizational measures (secure access, hashed passwords, HTTPS). Non-professional contact details (email, phone) are not displayed publicly.

8. Visual credits (third-party resources)

OpenMoji. Some icons displayed on the site and in the mobile app come from the OpenMoji project (HfG Schwäbisch Gmünd & contributors), published under the Creative Commons Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) licence. In accordance with this licence, this attribution notice is brought to your attention; graphic files may be resized or integrated into the interface without substantially altering the meaning of the work.

SVGRepo. Some icons or SVG files may come from SVGRepo. Licenses vary depending on the resource. For any given icon, the license displayed on SVGRepo prevails.