Controller
The controller is GELBM, 27 rue St Exupery 85140 Essarts en bocage. Privacy and GDPR contact: bilom@lilelegale.com.
Data processed
Depending on use, we may process email address, account/session data, security identifiers, language and consent preferences, order and billing data, payment references, owned collectibles, favourites, Vault history, support requests and anti-fraud information. Optional personal/contact/billing profile details entered by the user may also be processed to provide requested account functions and, where necessary, prepare documents relating to an order.
Purposes
Data is used to create and secure accounts, perform orders, deliver collectibles, operate the Vault, provide support, prevent fraud and abuse, comply with accounting/tax/legal obligations and improve technical reliability.
Legal bases
Depending on the processing, the legal basis may be performance of the contract, compliance with legal obligations, GELBM’s legitimate interests in operating and securing the service, or consent where legally required.
Recipients and processors
Data may be processed by providers strictly necessary to the service, including Stripe for payments, Vercel for hosting, Neon for the database and, when enabled, Resend for transactional email and Cloudflare for DNS/routing.
Transfers outside the EEA
Some providers may process data outside the European Economic Area. Where required, transfers must rely on an appropriate legal mechanism such as an adequacy decision or standard contractual clauses.
Retention
Data is kept for as long as necessary for the service and stated purposes, then archived or deleted according to applicable legal obligations. Accounting and transaction records may be retained for statutory periods.
Your rights
Under the GDPR and applicable law, you may have rights of access, rectification, erasure, restriction, portability and objection. Consent can be withdrawn where processing relies on it. Complaints may be lodged with the CNIL. Contact: bilom@lilelegale.com.
Security
Banana Vault uses technical and organisational measures intended to protect accounts, sessions, payments, data and collectibles.
Analytics and advertising
Banana Vault does not currently use Google Analytics, Meta Pixel or TikTok Pixel and does not include targeted advertising. Optional trackers remain disabled until valid consent is obtained.
Banana Life, conversations and memory
Banana Life may process messages sent to a banana, generated replies, check-ins, relationship or mood states, XP, progression, maintenance actions and information explicitly saved to memory to provide and personalize the experience, preserve continuity and prevent abuse. Do not give a banana passwords, payment-card data, secrets or unnecessary sensitive information.
Gift Vault data
To prepare and deliver a gift, Banana Vault processes the recipient identity and email, optional phone number, sender name, message, occasion, language, scheduled date, delivery/claim status and technical data needed to secure the link.
Automated systems and AI
Some conversational features may use automated or artificial-intelligence systems to generate playful replies. They do not make decisions producing legal or financial effects. Important account, purchase, refund or consumer-rights matters must use dedicated flows or support.