Privacy Policy

2.1 Your account and profile

• Credentials: email address and password. The password is hashed by Supabase Auth (bcrypt); nobody at Chatven can read it. With “Continue with Google”, Google sends us your email address, your name and your Google identifier, never your Google password.
• Profile: last name, first name, country and city of residence (chosen from a list), phone number (optional), profile picture (optional) and public nickname.
• Settings: language, theme, currency, listing archiving delay and other display preferences.
• Acceptance of documents: the date on which you accepted the terms of use and acknowledged this policy.

2.2 What you record in Chatven

• Your reselling activity: categories, tracked listings, purchases, items, units in stock, sales, costs, prices, dates, platforms, free-text notes and descriptions, tags and labels. In your records (sales ledger, purchase register): the payment method, the document reference and, if you enter it, the name of the customer or supplier.
• Photos and receipts: the photos you upload (items, authenticity checks, profile picture), copies of the photos of the listings you track or import, and the receipts attached to your records (photo or PDF of a receipt, an invoice, an order screenshot). A receipt can be sent from your phone through the line’s QR code: a limited-use link (30 minutes, 10 uploads), with no sign-in on the phone. Photo metadata (GPS location, device model, date taken…) is removed on upload; a PDF is kept as you send it.
• Tax situation (optional): status and scheme (private individual, micro-enterprise, standard regime, company subject to corporation tax…), VAT, SIRET, the amount of your CFE and, if you wish, your household (couple or not, dependent children, single parent), your other income and your spouse’s. It is only used for your indicative tax estimates and your records, and is never sent to the tax authorities. The SIRET you enter is checked against the public French business directory to retrieve the official name.
• Badges and statistics, computed from your activity.
• Notifications shown in the app.

This data is linked to your account only and is not shown to other users. Exceptions: what you choose to make visible (2.5), the aggregated statistics described in section 5, and, on a listing page, the number of other accounts tracking the same listing (a number, never an identity).

2.3 Third-party seller data

When you track or import a listing, Chatven records for your account only what the page publicly shows: title, price, description, photos, listing address and, for the seller, their name or nickname, their identifier on the platform, their rating, their number of reviews, their type (private or professional) and, depending on the site, their location, seniority, number of sales and the address of their profile picture. The listing photos are copied to our servers so they stay visible if the listing disappears. The seller’s profile picture, however, is not copied: it is displayed from the platform, for as long as the platform shows it.

Purpose: letting you follow the listings you chose. Legal basis: the legitimate interest, yours and ours, in keeping track of listings that are already public; Chatven is responsible for this hosting. This data is not shown to other users, feeds no public statistics and is not used to profile sellers; you undertake to use it only for your own purchases and sales. It is erased when you delete the listing or your account. A seller who wishes to exercise their rights can write to privacy@chatven.fr.

2.4 Features that use artificial intelligence

Features marked with a sparkle send data to our processor Anthropic (United States), which provides the Claude AI model. Only what the requested analysis needs is sent, when you start it, and never your password:

• Authenticity check: the description of the item, your questions (free text) and the photos you upload, for the duration of the analysis. The photos, the result and the name of the model used are kept in your account. Legal basis: performance of the contract. Only send photos of the item: if you reuse a seller’s photos, crop them to the item (no face, interior or nickname).
• Listing description and bundle sale: the information of the items concerned (title, characteristics, condition, price).
• Market price search: your item’s information, then the titles and prices of the listings read on the sites, to discard those that do not match.

According to its commercial terms, Anthropic does not use this data to train its models and only keeps it for a limited period. The transfer to the United States is governed by the European Commission’s standard contractual clauses. A request that our filters consider a misuse (text addressed to the AI rather than a real question, for example) is refused; its text and photos are then kept for review by our team. After several refused requests within 24 hours, the account’s AI features are paused automatically, for at most 24 hours, until a person has reviewed them (Art. 22 GDPR): you can ask for that review at the address in section 1.

2.5 What you choose to make visible

• QR labels (/i/… addresses): when you make an item’s sheet public, anyone who scans the label sees the information you chose to display (photos, title, description, characteristics and, where applicable, your shop’s name, logo and contact details). The purchase price, margin, source and stock entry date are never displayed. Openings of the sheet are counted per day and per hour, without knowing who opens it. You can close the sheet at any time.
• Listing share links (/share/… addresses): anyone who receives the link sees the listing’s title, price, photos, description and location. The link expires after 24 hours.
• Leaderboard and contest: only if you sign up. Other participants then see your nickname, your profile picture, your badges (some indicate a sales or profit tier), your number of sales and your rank. You can leave at any time.

These pages are not indexed by search engines.

2.6 Subscription, payment and consents

• Subscription: plan, status, renewal dates, packs and top-ups purchased, Stripe customer and subscription identifiers.
• Payment: your card is entered and processed directly by Stripe. Chatven never has access to it and does not store it.
• Contractual consents: when you subscribe, we archive what you accepted (text displayed, version, language, date, IP address and browser), as well as any withdrawal requests, so that we can prove we met our obligations.
• Arrival link: if you arrive through one of our video links (/v/… addresses), a cookie remembers that link for 30 days. It is only attached to your account, then passed to Stripe with your subscription (so we know which videos bring subscribers), if you tick the optional box shown at sign-up; otherwise it is erased when the account is created, without having been used. Clicks on these links are counted without any personal data.

2.7 Technical data and logs

• Connection: IP address and browser information, processed by our hosting providers to serve the pages, and session cookie.
• Account log: sign-ins, failed sign-ins, sign-outs, changes of password, profile or tax status, exports, deletion and support access, with the date, IP address and browser.
• Extension devices: for each connected browser, a random identifier, a label and the creation and last-use dates, to link the extension to your account and limit the number of devices.
• Change history: the before and after state of your additions, edits and deletions, so that a mistake can be repaired at your request.
• Error logs: errors met by the site or the extension (page, code, message, version), with tokens and email addresses masked.
• Audience measurement: Vercel Web Analytics and Speed Insights count page views and measure their speed, without cookies or any identifier that could recognise you.
• Price search log: for each search started, how it went (sites queried, number of listings read and kept, duration), but neither the listings nor their prices.

2.8 Contact and emails

• Contact form: name, email, subject and message. They reach us by email and are stored in our database. Emails you write to our addresses are received by our mail provider (Ionos).
• Emails we send: only emails related to the Service (address confirmation, password, end of trial, subscription). Our provider Resend tells us whether they were delivered or rejected. No marketing emails.

External services used that are not our processors

• Google: if you choose “Continue with Google”, Google authenticates you and sends us your email and name, under its own policy.
• Place search: the town name you type in your profile is sent, from our servers, to geo.api.gouv.fr (French State) and to Photon (komoot, Germany), to suggest a list of places.
• Business directory: the SIRET you enter is sent to recherche-entreprises.api.gouv.fr (French State).
• Marketplaces: the extension visits their pages with your session, as you would; they handle these visits under their own rules.

Support access and public statistics

• Support: to handle a support request, a Chatven administrator can view your account or open it in support mode (a banner then shows it). These openings are recorded in the account log, and a notification lets you know.
• Public statistics: the “Platform comparison” page publishes, per platform, the number of sales and averages (sale price, margin, time to sell) computed on the sales recorded by all accounts. An average is only shown if it is based on at least 30 sales from at least 5 different accounts; no account is named or detailed, and nothing comes from the listings you track. Legal basis: legitimate interest. You can object by writing to privacy@chatven.fr.