Privacy Policy

1. Data controller

CapWind Group
Email: contact@capwindgroup.fr
Responsible: Arnaud Cardinal

2. Data collected

We collect the following data:

• Registration data : last name, first name, email address, password (hashed)
• Profile data : phone number (optional)
• Property data : name, address, description, photos, rates
• Booking data : traveler name, dates, email, phone
• Technical data : IP address, browser type, pages visited

3. Processing purposes

• Creation and management of your user account
• Provision of the direct booking service
• Sending transactional emails (welcome, booking confirmation)
• Service improvement and usage statistics
• Customer support

4. Legal basis

The processing of your data is based on:

• Contract execution : provision of the CapDirect service
• Consent : for marketing communications (if applicable)
• Legitimate interest : service improvement, security

5. Data sharing

Your data is never sold. It is only shared with:

• Supabase (database hosting, EU servers)
• Vercel (website hosting)
• Resend (transactional email sending)
• Stripe (secure payment, if paid subscription)
• Crisp (online support chat)

6. Hosting and security

Data is hosted in the European Union (Supabase — AWS eu-west infrastructure). Communications are encrypted via HTTPS/TLS. Passwords are hashed (bcrypt).

7. Retention period

• Account data : kept as long as the account is active, deleted within 30 days after account deletion
• Booking data : kept for 3 years (accounting obligations)
• Technical logs : 12 months maximum

8. Cookies

CapDirect uses cookies for:

• Essential cookies : authentication, language preferences (necessary for operation)
• Analytics cookies : anonymized visit statistics
• Third-party cookies : Crisp (support chat)

You can manage your preferences via the cookie banner displayed during your first visit.

9. Your rights (GDPR)

In accordance with GDPR, you have the following rights:

• Right of access : obtain a copy of your data
• Right of rectification : correct your inaccurate data
• Right of deletion : request the erasure of your data
• Right to portability : retrieve your data in a standard format
• Right to object : object to the processing of your data
• Right to withdraw consent : at any time

To exercise these rights: contact@capwindgroup.fr

You can also file a complaint with the CNIL: CNIL : www.cnil.fr

10. Modifications

This policy may be modified at any time. Users will be informed of any significant change by email or notification on the platform.