GetUnseen
/
Privacy policy
This is a translation provided for convenience. In case of any discrepancy, the French version prevails. Read the French version
Yann Burger — entrepreneur individuel (EI)
UNSEEN Factory — trading name, “GetUnseen” app — micro-enterprise
SIRET: 520 020 355 00027
1, boulevard Paul Langevin, 44100 Nantes, France
DPO contact: hello@getunseen.app
When you use the GetUnseen app and the getunseen.app site, the following data is collected:
| Data | Purpose | Legal basis |
|---|---|---|
| E-mail address | Authentication, sending order confirmations and invoices | Performance of the contract (Art. 6.1.b) |
| First name, surname | Identification, invoicing, delivery | Performance of the contract (Art. 6.1.b) |
| Postal address | Shipping of the photo prints (passed on to the printer and the carrier) | Performance of the contract (Art. 6.1.b) |
| Recipient's telephone number | Delivery of the parcel: required by the printer and the carrier, who may contact the recipient in the event of a delivery problem | Performance of the contract (Art. 6.1.b) |
| Photos taken in the app | Retention for up to 90 days after delivery; transfer to the printer to produce the prints | Performance of the contract (Art. 6.1.b) |
| Notification token | Sending notifications (photos developed, upcoming deletion of the photos, end of an event), if you have allowed them | Consent (Art. 6.1.a) — can be withdrawn in the iPhone settings |
| Order history | Delivery tracking, refunds, accounting | Legal obligation (Art. 6.1.c) — 10 years |
| Payment data | Secure processing of transactions | Performance of the contract — processed exclusively by Stripe |
| Data | Period |
|---|---|
| Account data (e-mail, name, address, telephone) | Lifetime of the account; erased when the account is deleted, except accounting records |
| Photos | 90 days after the delivery date of the order, then deleted automatically |
| Invoices and accounting records | 10 years (legal obligation — French Commercial Code Art. L123-22) |
| Delivery addresses and telephone numbers of an order | Kept with the order, for tracking and complaints, then in the accounting records (10 years) |
| Print files (archive of the photos sent to the printer) | 30 days after shipping, then deleted automatically |
| Backups (encrypted copies of the database and the photos) | Rolling 14 days: deleted data also disappears from the backups no later than 14 days afterwards |
UNSEEN Factory calls on the following processors as part of the processing of your data:
| Processor | Role | Location |
|---|---|---|
| Supabase, Inc. | Database, authentication, photo storage | European Union (Ireland) |
| Stripe, Inc. | Card payment processing | United States (EU–US Data Privacy Framework, standard contractual clauses) |
| Cloudprinter.com B.V. | Printing of the prints and handover to the carrier | European Union (the Netherlands; printing in Germany for France) |
| Carrier (appointed by Cloudprinter) | Delivery of the parcel | European Union (for example GLS) |
| Cloudflare, Inc. (R2) | Storage of print files and encrypted backups | European Union (EU jurisdiction) |
| Resend, Inc. | Sending of transactional e-mails | United States (SCCs) |
| OVH SAS | Hosting of the getunseen.app website | France (Roubaix) |
| Apple Inc. | “Sign in with Apple” login and delivery of notifications (APNs) | United States (SCCs) |
| Google LLC | “Continue with Google” login (authentication only) | United States (SCCs) |
To fulfil an order, the photos to be printed and the recipient's name, address and telephone number are passed on to Cloudprinter, which communicates them to the carrier solely for the delivery of the parcel. No data is sold or transferred to third parties for commercial purposes.
Transfers outside the European Union (Stripe, Resend, Apple, Google, in the United States) rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.
In accordance with articles 15 to 22 of the GDPR, you have the following rights over your personal data:
You can delete your account from the app (Account → My profile & address → Delete my account), or by writing to hello@getunseen.app from the address associated with your account.
Deletion from the app is immediate: account, profile and photos are erased. A request by e-mail is processed within 30 days at most. In both cases, the data also disappears from the backups no later than 14 days afterwards, and documents subject to a legal retention obligation (invoices) are kept for the period laid down by law, then deleted.
The GetUnseen app and the getunseen.app site use neither advertising tracking cookies nor third-party analytics tools. No cookie consent is required at this stage.
Should audience measurement tools be added, a GDPR-compliant consent banner would be put in place beforehand.
UNSEEN Factory implements appropriate technical and organisational measures to keep your data secure:
If you consider that the processing of your personal data breaches the GDPR, you have the right to lodge a complaint with the competent supervisory authority:
Commission Nationale de l'Informatique et des Libertés (CNIL)
3, place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07
cnil.fr
UNSEEN Factory reserves the right to amend this privacy policy at any time. In the event of a substantial change, users will be informed by e-mail or by a notification in the app. The version in force is always available at getunseen.app/en/privacy/.