Privacy policy

1. Who is responsible for your data

CHAFFY LABS, 60 rue François Ier, 75008 Paris, France, is the controller for the processing needed to run Affixe: accounts, kennels, subscriptions. Contact: [email protected].

Data you send on a kennel's website (application, message, reservation) is processed on behalf of that kennel, which is its controller: contact the kennel with any question. Affixe hosts it as a processor.

2. Data processed and purposes

• Account: email address, name, interface language, to sign you in and run your kennel (performance of the contract).
• Kennel and website: published content, photos, information about animals and litters, to provide the Service (performance of the contract).
• Subscription: plan, invoices, billing address, VAT number, to bill and meet our accounting obligations (contract and legal obligation). Card details are processed by Stripe only.
• Service emails: sign-in links, invitations, notifications of applications and messages (performance of the contract).
• Technical data: connection logs and IP addresses, for the security of the Service (legitimate interest).
• Visitors to kennel websites: answers to application and contact forms, reservation details, processed on behalf of the kennel.
• Audience measurement on kennel websites: page viewed, referring site, device type and approximate location (country, region, city, derived from the IP address by our provider Cloudflare at the time of the visit), counted only as daily totals, with no cookie and no IP address kept, to give the kennel visit statistics (legitimate interest; consent-exempt measurement under the CNIL's guidelines).

3. Retention

• Account and kennel: while the account is active, then deleted when the kennel is closed.
• Invoices and accounting records: 10 years (article L123-22 of the French Commercial Code).
• Technical logs: 12 months at most.
• Kennel website visit statistics: daily totals, 25 months at most. The anonymous fingerprint used to count a visitor only once a day is erased within 48 hours and cannot recognise them from one day to the next.
• Data from kennel website visitors: as the kennel decides, and at the latest until its website is closed.

4. Recipients and sub-processors

Your data is never sold or used for advertising. It is only accessible to the people of the kennel concerned and to Affixe's technical providers:

• Vercel Inc. (USA): application hosting;
• Cloudflare, Inc. (USA): routing, security and file storage (R2);
• Neon (Databricks, Inc., USA): database;
• Resend (USA): sending emails;
• Stripe Payments Europe, Ltd. (Ireland): subscription payments.

5. Transfers outside the European Union

Some providers are based in the United States. These transfers rely on the EU–US Data Privacy Framework for certified providers, or otherwise on the European Commission's standard contractual clauses.

6. Cookies

Affixe uses no advertising cookies and no third-party analytics. Only strictly necessary cookies are set, which need no prior consent: the session cookie (sign-in), the interface language (1 year) and the dashboard menu state. Your light or dark theme choice is stored in your browser's local storage. Audience measurement on kennel websites uses no cookies.

7. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, write to [email protected]; you will get an answer within one month. A kennel's owner can also export its data from the settings.

You can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

8. Security

Traffic is encrypted (HTTPS), access to a kennel's data is limited to its members, and sign-in uses single-use links, with no password to store.