1. Data controller

PELICANS LABS is the controller where it determines why and how personal data is processed. The producer handling an order receives the information needed to prepare and hand it over and remains responsible for its own use of that information.

2. Data we process

Depending on the features you use, Cap-Ostréa may process:

• Account and authentication data: email address, display name, account ID and technical information provided through Supabase Auth, Sign in with Apple or email one-time codes.
• Profile and preferences: favourites, notification settings and addresses you choose to save.
• Orders: products, quantities, amounts, producer, time slot, fulfilment method, required contact details and status history.
• Payments: transaction reference, limited payment-method details, status, refunds and fraud-prevention information. Stripe directly processes full card data.
• Location and maps: device location after permission, place searches, map area and selected address. Merely viewing a map does not create a movement history; an address selected for an order or saved to the account is stored for that purpose.
• Order messages: message content, date, order, sender role, reports and participant blocks used to keep chat safe.
• Support and incidents: request content, reply details and attachments you choose to provide.
• Push notifications: push token, platform, enabled status and delivery information.
• Security and operation: technical logs, app version, errors, network address and events needed to prevent abuse and diagnose failures.

3. Why we process it

We process data to provide and secure the account and requested services; record, prepare, pay for and track orders; give the relevant producer the information required for its sale; provide and moderate order chat; answer support requests; prevent fraud; and meet legal duties. Contract performance, legal obligations, legitimate interests and consent apply according to the specific purpose.

Device location is used only after system permission. Push messages require the device's notification permission. The distributed mobile release does not use Guardian analytics and does not send newsletters. A preference shown in an account does not itself activate marketing.

4. Payments

Stripe provides the secure payment interface and processing. PELICANS LABS does not store the full card number, full expiry date or security code. Cap-Ostréa receives limited identifiers and statuses needed to display and reconcile a transaction, handle a refund and comply with accounting duties.

The Stripe SDK also processes technical and interaction information needed to operate its components, prevent fraud and improve its service; Stripe states that this information is not used for advertising.

Apple Pay may be offered through Stripe on compatible devices. PELICANS LABS does not receive the real card number stored in Apple Wallet.

5. Location and maps

Location permission is optional. If granted, location centres the map and helps show nearby producers. You may refuse and use search or enter an address where available.

Mapbox telemetry is disabled before maps are displayed in the distributed app. Mapbox receives the technical requests needed to load maps. Geoapify processes address searches, geocoding and requested route or distance calculations. You can withdraw location permission in iOS or Android settings.

6. Notifications

The app asks for notification permission in context. If accepted, Expo and Apple or Google system services deliver push notifications. Remote payloads are limited to necessary operational information; order-chat text is not included in those payloads. Notification permission can be disabled in device settings.

7. Order chat, reports and blocking

Chat is limited to order-related exchanges. Authorised participants can see messages, which may be checked automatically for clearly abusive or prohibited content. A user can report a message and block the other participant. Users can also report a storefront or product, hide a producer locally and undo that choice from Account. Authorised PELICANS LABS staff may review necessary material, hide or unpublish content and keep a moderation record to handle the report and protect the service.

8. Recipients and service providers

Access is limited to what each recipient needs: the producer handling an order; authorised PELICANS LABS staff; Supabase for data, authentication and storage; Railway for API hosting; Vercel for web hosting; Stripe for payments; Mapbox for map display; Geoapify for address search, geocoding and route or distance calculations; Resend for transactional email and one-time codes; Brevo for verification SMS and operational alerts when enabled; Expo, Apple and Google for push delivery; and authorities or advisers where required by law or legal claims.

9. Analytics, cookies and advertising

Guardian analytics is disabled in the distributed mobile app. The app does not request App Tracking Transparency permission, show targeted advertising or build an advertising profile. Mapbox telemetry is disabled.

On the public website, a first-party cookie may remember an “accept” or “reject” audience-measurement choice. Google Tag Manager or Google Analytics can load only when the site has been configured for it and the visitor accepts. The choice can be reopened through “Gérer les cookies” on the website.

10. Retention and deletion

Data is kept for the time necessary for the purpose described, then deleted or anonymised where technically and legally possible. The period depends on matters such as an active account or order, a dispute, a security report, and legal rules for commercial and accounting records.

Account deletion removes or separates profile data that no longer needs to be retained. Limited order, payment, invoice, fraud or moderation records may remain under restricted access for legal obligations or legal claims. Backups follow their normal replacement cycle and are not used to reactivate a deleted account.

11. Delete an account

A signed-in user can start deletion in the app through Account → Delete my account, then confirm the account email. No prior support email is required. If account access has been lost, or for a guest order, email support@cap-ostrea.fr. Reasonable verification may be requested to prevent deletion of somebody else's data.

12. International transfers

Service providers may process some data from several countries. Where data leaves the European Economic Area, PELICANS LABS relies on the mechanisms available under the GDPR and the contractual safeguards offered for the relevant configured service. Contact us for further information.

13. Your rights

You may request access, correction, deletion, restriction or portability, object to processing based on legitimate interests, and withdraw consent at any time. Use the relevant in-app setting or contact support@cap-ostrea.fr or PELICANS LABS at the registered address above.

You may also complain to the French data protection authority, the CNIL — www.cnil.fr.