Politique de confidentialité

1. Introduction

LinkUp (« nous », « notre ») exploite la plateforme LinkUp (la « Plateforme »), un marché connectant les clients avec des prestataires de services indépendants en Suisse.

Cette Politique de confidentialité explique comment nous collectons, utilisons, partageons et protégeons vos informations personnelles lorsque vous utilisez notre Plateforme, conformément à la Loi fédérale sur la protection des données (LPD/nLPD) et au Règlement général sur la protection des données (RGPD).

Responsable du traitement :

RAWR Productions Ferreira Francisco (Entreprise individuelle)

Bühlstrasse 5, 8933 Maschwanden, Suisse

IDE: CHE-397.371.542

E-mail : privacy@trylinkup.ch

Texte intégral (anglais)

2. Information We Collect

2.1 Information You Provide

Data Type	Examples	Purpose
Account Information	Name, email, phone number, password	Account creation, authentication
Profile Information	Address, profile photo, bio	Service matching, profile display
Payment Information	Billing address (card details handled by Stripe)	Payment processing
Job/Request Data	Service descriptions, location, budget, photos	Matching customers with providers
Communications	Messages, support tickets	Platform messaging, support
Provider Business Info	Business name, services offered, certifications	Profile display, verification

Important: LinkUp does not store your credit card details. All payment card data is processed directly by Stripe, our payment processor.

2.2 Information Collected Automatically

Data Type	Examples	Purpose
Device Information	Browser type, OS, device ID	Security, platform optimization
Usage Data	Pages viewed, features used, time spent	Platform improvement
Location Data	IP-based location, user-provided location	Service area matching
Analytics Data	Aggregated usage patterns	Platform improvement

2.3 Information from Third Parties

Source	Data Type	Purpose
Stripe	Payment confirmation (no card details)	Transaction records
Authentication Providers	Email verification status	Account security

3. How We Use Your Information

We use your information to:

Purpose	Legal Basis (GDPR Art. 6)
Provide and operate the Platform	Contract performance
Match customers with service providers	Contract performance
Process payments via Stripe	Contract performance
Send transactional notifications (job updates, messages)	Contract performance
Respond to support requests	Contract performance
Send marketing communications (with consent)	Consent
Improve platform features and user experience	Legitimate interest
Prevent fraud and ensure security	Legitimate interest
Comply with legal obligations	Legal obligation

4. How We Share Your Information

4.1 Shared with Other Users

User Type	Information Shared	Purpose
Customers see	Provider name, profile, reviews, service area	Hiring decisions
Providers see	Customer name, job details, location	Offer submission
After job acceptance	Contact details (phone, address as needed)	Service fulfillment

4.2 Shared with Service Providers

Provider	Purpose	Data Shared
Stripe	Payment processing and provider payouts	Transaction data, identity for payouts
Convex	Backend infrastructure and database	Application data
Vercel	Hosting and web analytics	Access logs, aggregated usage data
Resend	Transactional email delivery	Email address, name, email content
Twilio	SMS and phone verification	Phone number, message content
Meilisearch	Search indexing	Job details, provider profile fields
OpenAI (USA)	AI summaries, request prefill and translation	Text you write in requests, messages and reviews

A service appears in this table because the Platform is built to use it. Where the corresponding feature is switched off, no data is sent to that service at all.

4.3 Legal Disclosures

We may disclose your information:

To comply with legal obligations

To respond to lawful requests from authorities

To protect our rights, property, or safety

To prevent fraud or illegal activity

4.4 We Never Sell Your Data

LinkUp does not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. Data Retention

Data Type	Retention Period	Reason
Active account data	While account is active	Service provision
Deleted account data (profile, login details, messages and attachments, reviews, consent records)	Erased immediately when you delete your account. There is no recovery period and deletion cannot be undone. Records we must keep by law are listed in the rows below	You asked for erasure
Requests you post (title, description, location, budget)	Requests that no one has paid to unlock and that you never confirmed (guest drafts) are deleted after 30 days. Every other request that is still open after 30 days is marked expired and the record is kept, including the text you wrote. We have not yet set an end date for expired requests. If you delete your account, your open requests are cancelled and the record is kept	Providers who paid credits for a lead or sent an offer need the record
Offers you send or receive	Kept. Offers are not removed when an account is deleted. We have not yet set an end date	Linked to payment and credit records we must keep
Chat messages and attachments	Kept while your account exists. Deleted, with their attachments, when either person in the conversation deletes their account. There is no automatic deletion by age	Service provision and dispute handling
Transaction records	Up to 10 years	Swiss tax/accounting law
Support tickets	3 years	Dispute resolution
Analytics data	Aggregated indefinitely	Platform improvement

6. Your Rights (GDPR & Swiss DPA)

You have the right to:

Right	Description	How to Exercise
Access	Obtain a copy of your personal data	Email privacy@trylinkup.ch
Rectification	Correct inaccurate data	Account settings or email
Erasure ("Right to be Forgotten")	Delete your data (with exceptions)	Account settings or email
Data Portability	Receive your data in a portable format	Email privacy@trylinkup.ch
Restriction	Limit how we process your data	Email privacy@trylinkup.ch
Object	Object to processing based on legitimate interest	Email privacy@trylinkup.ch
Withdraw Consent	Withdraw consent for marketing	Unsubscribe link or settings

Response Time: We will respond to requests within 30 days.

Swiss DPA Specifics: Swiss residents have equivalent rights under the revised Federal Act on Data Protection (revDSG/FADP).

7. Cookies and Tracking

7.1 Essential Cookies

Required for platform functionality. Cannot be disabled.

Session cookies

Authentication cookies

Security cookies

7.2 Analytics (optional)

Analytics are off until you allow them with the Analytics toggle in the cookie banner. Nothing below is collected or loaded before then, and you can withdraw your choice at any time through "Cookie settings" in the footer or, once you are signed in, in Settings.

Vercel Web Analytics and Speed Insights: page views and page-speed measurements.

Our own usage events, stored in our database: the page you are on, the label of the button or link you click (the first 50 characters of its text), a random identifier for your browser tab and, when you are signed in, your account ID. We use them to see which parts of the platform are used and to find problems.

Separately, when a technical error happens in your browser we send an error report (the error message, the page and your browser type) to our own error log. This does not depend on the Analytics toggle, because it is needed to keep the platform secure and working.

7.3 Marketing Cookies

Only with explicit consent:

Third-party advertising cookies (if applicable)

7.4 Managing Cookies

You can change your Analytics and Marketing choices at any time through "Cookie settings" in the footer or, once you are signed in, in Settings. You can also manage cookies in your browser settings. Note that disabling essential cookies may affect platform functionality.

8. International Data Transfers

Your data may be processed outside Switzerland/EEA by our service providers. We ensure adequate protection through:

Mechanism	Description
Adequacy Decisions	Transfers to countries with adequate protection
Standard Contractual Clauses (SCCs)	EU-approved transfer mechanisms
Supplementary Measures	Additional technical/organizational safeguards

Primary Locations: Switzerland, EU, USA (with appropriate safeguards)

Named US transfer: where an AI feature summarises, prefills or translates for you, the text you wrote into a request, message or review is sent to OpenAI in the USA for that purpose. If you would rather this did not happen, do not use those features and contact privacy@trylinkup.ch.

9. Data Security

We implement appropriate technical and organizational measures:

Measure	Implementation
Encryption in Transit	TLS 1.3 for all connections
Encryption at Rest	AES-256 for stored data
Access Controls	Role-based access, MFA for admin
Regular Audits	Security reviews and penetration testing
Incident Response	Documented breach procedures

10. Children's Privacy

LinkUp is intended for users aged 18 and older. We do not knowingly collect data from individuals under 18. If we discover we have collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will:

Post the updated policy on this page

Update the "Last Updated" date

Notify users of material changes via email or platform notification

Continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

Data Protection Inquiries:

Email: privacy@trylinkup.ch

Supervisory Authority (Switzerland):

Federal Data Protection and Information Commissioner (FDPIC/EDÖB)

Feldeggweg 1, 3003 Bern, Switzerland

https://www.edoeb.admin.ch