This Privacy Policy describes how Notion Of. (“we”, “us”, “our”) collects, uses, and protects your personal data when you use the website https://mastros.fr (the “Website”) and our related services (the “Services”).

We comply with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (“Loi Informatique et Libertés”).

1. Data Controller

The entity responsible for processing your personal data is:

Company: Notion Of.

Legal form: Société par actions simplifiée (Société à associé unique)

Registered office: 77 avenue des Gobelins, 75013 Paris, France

SIREN / RCS: 944 090 158 R.C.S. Paris

Email: privacy@mastros.fr

2. Personal Data We Collect

Data you provide directly

• identity: name, email, phone number
• account information (login credentials, preferences)
• property information (address, surface area, type)
• renovation project description and documents
• messages, forms, support requests

Data collected automatically

• IP address, browser type, device
• pages visited, actions taken
• cookies and similar technologies (see section 7)

Data from third parties (if applicable)

• payment providers (Stripe)
• authentication tools (Google, Supabase)
• analytics platforms (Vercel Analytics)
  

We only collect data necessary for the intended purposes.

3. Purposes and Legal Bases of Processing

Your personal data is processed for the following purposes:

Providing the service: Performance of contract

Account management: Performance of contract

Matching the artisans: Performance of contract

Payment protection (escrow): Performance of contract

Customer support: Legitimate interest

Service notifications: Legitimate interest

Newsletter / Marketing: Consent

Site improvement: Legitimate interest

Statistical analysis: Legitimate interest

Legal obligations: Legal obligation

4. Recipients of Your Data

Your personal data may be shared with:

• Internal teams of Notion Of.
• Technical service providers: Vercel (hosting), Supabase (database, authentication), Stripe (payment), Resend (email)
• Verified artisans on the platform (only data necessary for the completion of the project)
• Legal authorities where required by law
• Partners, only with your consent

No data is sold.

5. Data Transfers Outside the EU

Some of our service providers are located outside the European Economic Area (notably Vercel Inc. and Stripe Inc., based in the United States). These transfers are governed by:

• the EU-US Data Privacy Framework
• standard contractual clauses approved by the European Commission
• appropriate technical security measures

You may request further details via privacy@mastros.fr.

6. Data Retention

We retain personal data only as long as necessary for the purposes described above:

• User account: until account deletion, then 3 years of archival
• Project data: duration of the project plus 5 years (construction legal obligation)
• Billing data: 10 years (accounting obligation)
• Analytics data: 13 months
• Cookies: see Cookie Policy

7. Your Rights (GDPR)

You have the following rights regarding your personal data:

• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw your consent at any time
• Right to lodge a complaint with a supervisory authority (CNIL in France)
  

To exercise your rights, contact us at:

privacy@mastros.fr

8. Security Measures

We implement technical and organisational security measures, including:

• encryption of data in transit (TLS) and at rest
• strict access controls (authentication, roles)
• hosting on certified infrastructure (Supabase: SOC 2 Type II, Vercel: SOC 2)
• regular auditing and monitoring

No system is infallible. In the event of a data breach, we will notify the CNIL and affected individuals within the legally required timeframe (72 hours).

9. Minors

The Site is not intended for persons under 16 years of age. Any data belonging to a minor that is detected will be deleted.

10. Changes to This Policy

This Policy may be updated. The date of the last update is indicated at the top of this page.

Any significant changes will be notified by email or notification on the Site.

11. Contact

For questions or requests regarding this Privacy Policy:

Email: privacy@mastros.fr

Address: 77 avenue des Gobelins, 75013 Paris, France