RealityPing
Privacy policy
1. Data controller
The controller of your data is [to be completed], a [to be completed], registered with the Trade and Companies Register (RCS) of [to be completed] under number [to be completed], whose registered office is at [to be completed] (hereinafter “RealityPing” or “we”). Contact for any question about your data: contact@realityping.com.
2. Data processed, why, and for how long
| Data | Why | Legal basis | Retention |
|---|---|---|---|
| Account: email, name, country, language, alert preferences | Managing your account and offering you missions | Contract | Life of the account, then 3 years |
| Business: registration number (SIREN/SIRET in France), company name, address, legal form, VAT number (from the public register when it can be consulted) | Checking your independent status, issuing invoices, tax obligations | Contract, legal obligation | Life of the account, then 10 years (accounting records) |
| Identity document, selfie, registration extract (Kbis in France) | Verifying your identity and your business | Legal obligation (fraud prevention, DAC7), legitimate interest | Deleted as soon as the decision is made (approval or refusal), at the latest 30 days after submission if no decision is made |
| Verification result: surname, first names, date of birth, type and country of the document | Proving the verification, DAC7 reporting | Legal obligation | Life of the account, then 10 years |
| Approximate position while you are “available” | Offering you nearby missions | Contract, when you switch it on | Erased at the end of the availability period |
| Photos, answers and position of mission evidence | Carrying out and checking the mission, handling disputes | Contract | For the time of validation and of any dispute |
| Pay, transfers, invoices | Paying you, keeping the accounts | Contract, legal obligation | 10 years |
| Device token for notifications | Sending you the alerts you chose | Contract | Until the device signs out |
We do not sell your data and make no advertising use of it.
3. What our customers see
A customer receives the result of the mission and its evidence. They never receive your name, your contact details, your position outside the mission, or your documents.
4. Recipients and processors
- Stripe (payments and payouts): receives your IBAN and the information it asks you for directly; we only see its last 4 digits.
- OVHcloud (hosting, France): hosts the app and its data.
- Mistral AI (automated document verification, for workers residing in: France): reads your documents for the time of the analysis, without keeping them for its own purposes or using them to train its models. This provider is established in the European Union (France): your documents stay there.
- Anthropic (automated document verification, for workers in the other countries): reads your documents for the time of the analysis, without keeping them for its own purposes or using them to train its models. As this provider is located outside the European Union (United States), this transfer is governed by the European Commission's standard contractual clauses.
- An artificial intelligence model translates the instructions of the missions you accept into the language of your app, and the answers you write into the customer's language. It receives neither your name nor your contact details.
- The tax authorities, for the reports the law requires of us.
Your data is hosted in the European Union. If you are established outside the Union, it is transferred there to perform the contract you enter into with us.
5. Automated decisions
An automated analysis helps check your application. It may approve an application whose checks are all conclusive; it can never refuse you: any uncertain or problematic application is examined by a person. No facial recognition is performed by this analysis.
6. Security
Identity documents are encrypted, stored separately, excluded from backups and deleted after the decision. Access is limited to the people who need it and logged.
7. Your rights
You have the right to access, rectify, erase, restrict, object to the processing of and port your data, as well as the right to give instructions about what happens to it after your death. To exercise them: contact@realityping.com. You may also lodge a complaint with the CNIL (www.cnil.fr) or with the data protection authority of your country.
Some data cannot be erased as long as a legal obligation requires it to be kept (invoices, tax reports).