Privacy policy
Last updated: February 2026
PRIVACY POLICY
Plyz Application
Last updated: February 2026
INTRODUCTION
Clickzou (SAS), publisher of the Plyz application, is committed to protecting the privacy of its users. This Privacy Policy explains how we collect, use, and protect your personal data.
1. DATA CONTROLLER
Clickzou SAS
5 impasse de la colombette
31000 Toulouse, France
SIRET: 950 814 426 00025
Email: contact@plyz.io
Legal representative: Jean-Christophe CASTANET
2. DATA COLLECTED
2.1 Identification Data
- Email address (for authentication)
- Username (optional)
- Profile picture (optional)
2.2 Content Data
- Photos created in the application
- Digital signatures
- Saved memories
2.3 Technical Data
- Unique device identifier
- Device type and model
- Operating system version
- Anonymized usage logs
2.4 Transaction Data
- In-app purchase history
- Payment information (processed by Apple, Google, and Stripe)
2.5 Location Data
- Precise GPS location (with your permission). It is used solely to verify that you are physically present at the venue of an "in-person" dedication event (concert, trade show, stadium, etc.) when you pay to take part. A fan's location is processed directly on your device to compute the distance to the event venue; it is neither stored nor transmitted to our servers. The coordinates of the venue set by the organizer (the celebrity) are, however, stored and associated with their event. You can revoke location access at any time in your phone settings.
3. PROCESSING PURPOSES
Your data is used to:
- Provide and improve application services
- Manage your user account
- Process transactions and payments
- Verify your presence at the venue of an in-person event (geolocation)
- Ensure platform security
- Send you service-related notifications
- Analyze usage to improve user experience
4. LEGAL BASIS FOR PROCESSING
The processing of your data is based on:
- Contract performance (service provision)
- Your consent (for certain optional features)
- Our legitimate interests (service improvement, security)
- Our legal obligations (transaction data retention)
5. DATA RECIPIENTS
5.1 Technical Service Providers
- Supabase (database hosting)
- Stripe (celebrity payment processing)
- Apple / Google (in-app purchases)
- Daily.co (video service for live sessions)
- Vercel (plyz.io website hosting)
- Replit (application server hosting)
- Anthropic (automatic content translation and moderation)
- Sentry (technical error reporting for service stability)
- Zoho Mail (service e-mail delivery)
5.2 Sharing with Other Users
- During live sessions, celebrities can see the usernames of participating fans
- Created signatures are shared with the recipient fan
5.3 Transfers Outside the EU
Some service providers may be located outside the European Union. In such cases, appropriate safeguards are implemented (standard contractual clauses, EU-US Data Privacy Framework).
6. RETENTION PERIOD
- Account data: retained as long as the account is active, then 3 years after deletion
- Photos and memories: retained as long as the account is active
- Transaction data: retained for 10 years (legal obligation)
- Technical logs: retained for a maximum of 1 year
7. YOUR RIGHTS
In accordance with the GDPR, you have the following rights:
7.1 Right of Access
You can request a copy of your personal data.
7.2 Right to Rectification
You can request the correction of inaccurate data.
7.3 Right to Erasure
You can request the deletion of your data (except for legal retention obligations).
7.4 Right to Data Portability
You can request to receive your data in a structured format.
7.5 Right to Object
You can object to the processing of your data for legitimate reasons.
7.6 Right to Withdraw Consent
You can withdraw your consent at any time.
To exercise your rights, contact us at: contact@plyz.io
8. DATA SECURITY
We implement technical and organizational measures to protect your data:
- Data encryption in transit (HTTPS/TLS)
- Data encryption at rest
- Secure authentication via OTP code
- Restricted access to personal data
- Regular backups
9. COOKIES AND SIMILAR TECHNOLOGIES
The application does not use cookies in the traditional sense. However, technical identifiers may be used to:
- Maintain your login session
- Remember your preferences
- Analyze application usage
10. MINORS
Plyz is reserved for persons aged 18 and over. We do not knowingly collect data concerning minors. If we discover that a minor has created an account, it will be deleted.
11. MODIFICATIONS
This Privacy Policy may be updated. Significant changes will be notified via the application. The last update date is indicated at the top of the document.
12. COMPLAINTS
If you believe that the processing of your data does not comply with regulations, you can file a complaint with the CNIL (French National Commission for Information Technology and Civil Liberties):
www.cnil.fr
13. CONTACT
For any questions regarding this Privacy Policy:
Email: contact@plyz.io
Address: Clickzou - 5 impasse de la colombette - 31000 Toulouse, France
