Controller
The controller is GELBM, 27 rue Saint-Exupéry, 85140 Les Essarts-en-Bocage, France. Privacy and GDPR contact: support@banana-vault.com.
Data processed
Depending on use, we may process email address, account/session data, security identifiers, language and consent preferences, order and billing data, payment references, owned collectibles, favourites, Vault history, support requests and anti-fraud information. Optional personal/contact/billing profile details entered by the user may also be processed to provide requested account functions and, where necessary, prepare documents relating to an order.
Purposes
Data is used to create and secure accounts, perform orders, deliver collectibles, operate the Vault, provide support, prevent fraud and abuse, comply with accounting/tax/legal obligations and improve technical reliability.
Legal bases
Depending on the processing, the legal basis may be performance of the contract, compliance with legal obligations, GELBM’s legitimate interests in operating and securing the service, or consent where legally required.
Recipients and processors
Data may be processed by providers strictly necessary to the service, including Stripe for payments, Vercel for hosting, Neon for the database and, when enabled, Resend for transactional email and Cloudflare for DNS/routing.
Transfers outside the EEA
Some providers may process data outside the European Economic Area. Where required, transfers must rely on an appropriate legal mechanism such as an adequacy decision or standard contractual clauses.
Retention
Data is kept for as long as necessary for the service and stated purposes, then archived or deleted according to applicable legal obligations. Accounting and transaction records may be retained for statutory periods.
Your rights
Under the GDPR and applicable law, you may have rights of access, rectification, erasure, restriction, portability and objection. Consent can be withdrawn where processing relies on it. Complaints may be lodged with the CNIL. Contact: support@banana-vault.com.
Security
Banana Vault uses technical and organisational measures intended to protect accounts, sessions, payments, data and collectibles.
Analytics and advertising
V1 does not use Google Analytics, Meta Pixel or TikTok Pixel and does not include targeted advertising. Optional trackers remain disabled until valid consent is obtained.