Oye Collective SASU
Table of Contents
1. Introduction and Scope2. Data Controller Information3. Types of Data We Collect4. Purpose and Legal Basis5. Data Sharing and Disclosure6. Data Retention Periods7. Your Rights Under GDPR8. Cookies and Tracking9. Contact Information10. Supervisory Authority
Privacy Policy

Oye Collective SASU

Effective Date: August 25, 2025•Last Updated: August 25, 2025•Paris, France

1. INTRODUCTION AND SCOPE

Oye Collective SASU ("we," "us," or "our") is a company incorporated under French law and located in Paris, France. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and all applicable French data protection laws.

This Privacy Policy applies to all users of our services, including:

  • SaaS Products: ACTVT desktop application and ComicVerse platform users
  • Development Services: Clients using our custom development services
  • Website Visitors: Anyone accessing our website and marketing materials

We serve over 10,000 product users and have completed more than 50 client development projects. This policy explains how we collect, use, store, and protect your personal data.

2. DATA CONTROLLER INFORMATION

Data Controller

Oye Collective SASU

Société par actions simplifiée unipersonnelle

Address: 10 RUE Louis Vicat, 75015 Paris, France

SIREN: 990 382 418

SIRET: 99038241800012

Contact: [email protected]

Service-Specific Roles:

• SaaS Products (ACTVT, ComicVerse): We act as Data Controller

• Development Services: We may act as Data Processor (separate DPAs available)

As a French company, we are subject to French data protection law (Loi Informatique et Libertés) and GDPR regulations. Our supervisory authority is the CNIL (Commission Nationale de l'Informatique et des Libertés).

3. TYPES OF DATA WE COLLECT

Personal Data

  • • Names and contact information
  • • Email addresses
  • • Phone numbers
  • • Postal addresses
  • • Company information

Account Data

  • • Usernames and passwords
  • • Account preferences
  • • Profile information
  • • Subscription details
  • • Usage history

Payment Data

  • • Billing information
  • • Payment method details
  • • Transaction history
  • • Tax information
  • • Invoicing details

Usage Data

  • • Application analytics
  • • IP addresses
  • • Device information
  • • Access logs
  • • Performance metrics

Development Services Data

  • Client company and project information
  • Project specifications and requirements
  • Communication records and meeting notes
  • Source code and technical documentation
  • NDA-protected confidential information

4. PURPOSE AND LEGAL BASIS FOR PROCESSING

Contract Fulfillment (Article 6(1)(b) GDPR)

  • • Providing SaaS products and development services
  • • Processing payments and subscriptions
  • • Customer support and communications
  • • Account management and access control

Legitimate Interests (Article 6(1)(f) GDPR)

  • • Security monitoring and fraud prevention
  • • Service improvement and analytics
  • • Business operations and administration
  • • Marketing to existing customers

Legal Obligations (Article 6(1)(c) GDPR)

  • • Tax and accounting requirements
  • • Regulatory compliance
  • • Data breach notifications
  • • Court orders and legal processes

5. DATA SHARING AND DISCLOSURE

Payment Processors

We may use one or more of the following PCI-compliant payment processors:

Stripe

Credit cards, bank transfers, global payments

Paddle

SaaS subscriptions, VAT handling, tax compliance

LemonSqueezy

Digital products, subscription management

Service Providers

  • Cloud hosting and infrastructure providers
  • Email and communication services
  • Analytics and monitoring services
  • Customer support platforms

We Never Sell Your Data

We do not sell, rent, or trade personal data to third parties for marketing purposes. Any data sharing is limited to service provision and legal requirements.

6. DATA RETENTION PERIODS

Data TypeRetention PeriodLegal Basis
Account DataDuration of service + 3 yearsContract & Legal obligations
Payment Records10 yearsFrench tax law requirements
Marketing DataUntil consent withdrawnConsent-based processing
Support Communications3 years after resolutionLegitimate interests
Access Logs12 monthsSecurity & compliance

7. YOUR RIGHTS UNDER GDPR

Right of Access (Article 15)

Request a copy of your personal data we hold

Response time: 30 days

Right to Rectification (Article 16)

Correct inaccurate or incomplete data

Response time: 30 days

Right to Erasure (Article 17)

"Right to be forgotten" - delete your data

Subject to legal obligations

Right to Data Portability (Article 20)

Receive your data in machine-readable format

JSON, CSV, or XML format

How to Exercise Your Rights

Contact us at: [email protected]

We will respond to your request within 30 days and may require identity verification.

8. COOKIES AND TRACKING TECHNOLOGIES

Essential Cookies

Required for basic site functionality

No consent required

Performance Cookies

Analytics and site improvement

Consent required

Functional Cookies

User preferences and settings

Consent required

Marketing Cookies

Advertising and marketing optimization

Consent required

You can manage cookie preferences through your browser settings or our cookie consent manager.

9. CONTACT INFORMATION

Privacy Inquiries

Email: [email protected]
Subject Line: "Privacy Request - [Your Name]"
Response Time: 30 days maximum

General Contact

Company: Oye Collective SASU
Address: 10 RUE Louis Vicat, 75015 Paris, France
SIREN: 990 382 418
SIRET: 99038241800012
Legal: [email protected]
Support: [email protected]

10. SUPERVISORY AUTHORITY

CNIL - French Data Protection Authority

Commission Nationale de l'Informatique et des Libertés

3 Place de Fontenoy - TSA 80715
75334 PARIS CEDEX 07
France

Website: cnil.fr
Phone: +33 1 53 73 22 22
Online Complaint: cnil.fr/plaintes

You have the right to lodge a complaint with CNIL if you believe we have not handled your personal data properly.

Last updated: August 25, 2025

This Privacy Policy is available in English. For questions about this policy in French, please contact [email protected]