Privacy Policy
Oye Collective SASU
1. INTRODUCTION AND SCOPE
Oye Collective SASU ("we," "us," or "our") is a company incorporated under French law and located in Paris, France. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and all applicable French data protection laws.
This Privacy Policy applies to all users of our services, including:
- SaaS Products: ACTVT desktop application, ComicVerse platform, and Upcoming Transit users
- Development Services: Clients using our custom development services
- Website Visitors: Anyone accessing our website and marketing materials
We serve over 10,000 product users. This policy explains how we collect, use, store, and protect your personal data.
2. DATA CONTROLLER INFORMATION
Data Controller
Oye Collective SASU
Société par actions simplifiée unipersonnelle
Address: 10 RUE Louis Vicat, 75015 Paris, France
SIREN: 990 382 418
SIRET: 99038241800012
Contact: privacy@oyecollective.com
Service-Specific Roles:
• SaaS Products (ACTVT, ComicVerse): We act as Data Controller
• Development Services: We may act as Data Processor (separate DPAs available)
As a French company, we are subject to French data protection law (Loi Informatique et Libertés) and GDPR regulations. Our supervisory authority is the CNIL (Commission Nationale de l'Informatique et des Libertés).
3. TYPES OF DATA WE COLLECT
Personal Data
- • Names and contact information
- • Email addresses
- • Phone numbers
- • Postal addresses
- • Company information
Account Data
- • Usernames and passwords
- • Account preferences
- • Profile information
- • Subscription details
- • Usage history
Payment Data
- • Billing information
- • Payment method details
- • Transaction history
- • Tax information
- • Invoicing details
Usage Data
- • Application analytics
- • IP addresses
- • Device information
- • Access logs
- • Performance metrics
Development Services Data
- Client company and project information
- Project specifications and requirements
- Communication records and meeting notes
- Source code and technical documentation
- NDA-protected confidential information
4. PURPOSE AND LEGAL BASIS FOR PROCESSING
Contract Fulfillment (Article 6(1)(b) GDPR)
- • Providing SaaS products and development services
- • Processing payments and subscriptions
- • Customer support and communications
- • Account management and access control
Legitimate Interests (Article 6(1)(f) GDPR)
- • Security monitoring and fraud prevention
- • Service improvement and analytics
- • Business operations and administration
- • Marketing to existing customers
Legal Obligations (Article 6(1)(c) GDPR)
- • Tax and accounting requirements
- • Regulatory compliance
- • Data breach notifications
- • Court orders and legal processes
6. DATA RETENTION PERIODS
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Account Data | Duration of service + 3 years | Contract & Legal obligations |
| Payment Records | 10 years | French tax law requirements |
| Marketing Data | Until consent withdrawn | Consent-based processing |
| Support Communications | 3 years after resolution | Legitimate interests |
| Access Logs | 12 months | Security & compliance |
7. YOUR RIGHTS UNDER GDPR
Right of Access (Article 15)
Request a copy of your personal data we hold
Response time: 30 days
Right to Rectification (Article 16)
Correct inaccurate or incomplete data
Response time: 30 days
Right to Erasure (Article 17)
"Right to be forgotten" - delete your data
Subject to legal obligations
Right to Data Portability (Article 20)
Receive your data in machine-readable format
JSON, CSV, or XML format
How to Exercise Your Rights
Contact us at: privacy@oyecollective.com
We will respond to your request within 30 days and may require identity verification.
9. MICROSOFT CLARITY ANALYTICS
What is Microsoft Clarity?
We use Microsoft Clarity to understand how users interact with our website, mobile applications (ComicVerse), and Upcoming Transit (upcomingtransit.com), allowing us to improve user experience and identify usability issues.
Website Analytics
Tracks visitor behavior, creates heatmaps, and session recordings to understand how users navigate our site.
Mobile App Analytics (ComicVerse)
Collects usage patterns, performance metrics, and user interaction data to optimize app experience.
Upcoming Transit (upcomingtransit.com)
Tracks visitor behavior, usage patterns, and performance metrics to improve transit information experience.
Data Collected by Clarity
Coarse Location
Approximate geographic location from IP address (city/region level only, not linked to user identity)
Product Interaction
Clicks, taps, scrolls, navigation patterns, and feature usage to understand user behavior
Performance Data
Page load times, app performance metrics, and error diagnostics to ensure stability
Device Information
Screen resolution, device type, operating system, and browser type (non-identifying)
Privacy Features
- ✓No PII Collection: Clarity does not collect personally identifiable information
- ✓Automatic Sanitization: All data is automatically sanitized to remove sensitive information
- ✓No Cross-App Tracking: Does not use device identifiers (IDFA/GAID) for tracking across apps
- ✓No ATT Required: Does not require App Tracking Transparency consent on iOS
- ✓GDPR & CCPA Compliant: Fully compliant with EU and California privacy laws
Mobile App Specific (ComicVerse)
- SDK Version: Latest stable release of Microsoft Clarity iOS SDK
- Does NOT Access: Camera, microphone, contacts, photos, or location services
- Data Transmission: Encrypted in transit (TLS 1.3) and at rest (AES-256)
- Privacy Manifest: Available in app bundle (PrivacyInfo.xcprivacy)
- Legal Basis: Legitimate interests (Article 6(1)(f) GDPR) for service improvement
Your Rights & Controls
Opt-Out Options
- • Use browser privacy settings or extensions
- • Enable Do Not Track (we honor DNT signals)
- • Contact privacy@oyecollective.com
Data Rights
- • Request access to your Clarity data
- • Request deletion of your data
- • Object to processing
Data Retention
- • Session data: 90 days
- • Aggregated analytics: Up to 25 months
For more information:Microsoft Privacy Statement
10. CONTACT INFORMATION
Privacy Inquiries
Email: privacy@oyecollective.com
Subject Line: "Privacy Request - [Your Name]"
Response Time: 30 days maximum
General Contact
Company: Oye Collective SASU
Address: 10 RUE Louis Vicat, 75015 Paris, France
SIREN: 990 382 418
SIRET: 99038241800012
Legal: legal@oyecollective.com
Support: support@oyecollective.com
Last updated: November 2, 2026
This Privacy Policy is available in English. For questions about this policy in French, please contact privacy@oyecollective.com