Privacy policy

Last updated: January 3, 2026

Treets.me, developed by the company InSugarWeTrust (SARL, registered in France under SIREN number 942 171 851, whose headquarters are located at 122 rue Amelot, 75011 Paris), attaches great importance to the protection of personal data of its users. This privacy policy aims to inform you clearly about how we collect, use, share and protect your data.

1. Who collects your data?

The data controller is: InSugarWeTrust 122 RUE AMELOT 75011 PARIS FRANCE Contact email: support@treets.me

2. What data do we collect?

For all users:

  • Email address
  • IP address
  • Navigation information (via analytics tools, server logs)

For creators:

We collect the following data, necessary for creating and managing your creator account:

  • Last name, first name
  • Date of birth
  • Postal address

Identity verification and banking information:

Identity documents:

  • Identity documents and age verification are handled directly by Stripe Connect
  • Treets.me does NOT store copies of your identity documents
  • Stripe processes this data according to their own privacy policy and regulatory obligations
  • We only receive confirmation of your verified status from Stripe

Banking information:

  • Payment details (IBAN for Europe, account number and routing code for the United States, or equivalent according to your country) are collected and stored by Stripe Connect
  • Treets.me does NOT have access to complete banking details
  • We only receive tokenized references necessary for payment processing
  • Stripe processes this financial data in compliance with applicable security and data protection standards, such as GDPR and PCI-DSS requirements

Uploaded content (for creators):

When you upload content (images, videos, documents) as a creator:

  • Content is stored on our AWS servers located in the European Union (region eu-west-3, Paris)
  • Purpose: hosting and delivering content to authorized buyers, reactive content moderation (following reports), legal compliance
  • Your intellectual property: You retain all intellectual property rights to your uploaded content

This data is necessary to:

  • Create and manage your creator account
  • Verify your identity and majority, in accordance with applicable legal obligations
  • Process payments and bank transfers via our payment service provider Stripe Connect
  • Host and deliver purchased content to buyers
  • Ensure platform security and legal compliance

3. Legal basis for processing

We process your data based on:

  • The contract (Terms of Service) - Article 6.1.b GDPR
  • Your consent (during registration) - Article 6.1.a GDPR
  • Our legal obligations (fraud prevention, age verification, accounting records) - Article 6.1.c GDPR
  • Our legitimate interest (security, usage analysis, content moderation) - Article 6.1.f GDPR

4. Use of data

We use your data to:

  • Create and manage user accounts
  • Facilitate payments and withdrawals via Stripe
  • Host and deliver purchased content
  • Protect users against fraud and illegal content
  • Manage content reports and moderation
  • Comply with legal obligations (accounting, law enforcement requests)
  • Improve the quality of our service

5. Data sharing

Your data is never sold. It may be shared only with:

  • Stripe Connect, for payment management, identity verification, and KYC compliance
  • AWS (Amazon Web Services), for hosting files, content, and data (servers located in EU)

These third parties act as data processors and are contractually bound to comply with GDPR requirements.

6. Retention period

Your data is kept according to different legal and contractual requirements:

Personal account data (email, name, address):

  • Active account: retained while your account exists
  • After account deletion: personal identification data deleted within 30 days

Uploaded content (images, videos, files):

For creators:

  • Unpurchased content: deleted within 30 days after account deletion
  • Purchased content: retained indefinitely to honor buyer licenses
  • Legal basis: contract execution with buyers (Article 6.1.b GDPR)
  • Buyers receive a perpetual, non-transferable license to access purchased content
  • Exception: may be deleted in exceptional circumstances (content posted without consent, harassment, safety concerns) following case-by-case evaluation of deletion requests submitted to support@treets.me

For buyers:

Content you purchased remains accessible indefinitely, even if the creator deletes their account

Financial and transaction data:

  • Transaction records: 10 years from the end of the fiscal year (legal accounting obligation in France)
  • These records contain: transaction amounts, dates, and tokenized payment references (not full banking details)

Identity verification:

  • Handled by Stripe Connect - see Stripe's privacy policy
  • Treets.me only retains verification status (verified/not verified)

Connection logs:

IP addresses and session data: 12 months (legal requirement under French law - LCEN)

7. Your rights

In accordance with GDPR, you have:

  • Right of access - obtain confirmation of data processing and a copy of your data
  • Right of rectification - correct inaccurate or incomplete data
  • Right to erasure - request deletion of your data (subject to legal and contractual limitations described in section 6)
  • Right to object - object to processing based on legitimate interest
  • Right to portability - receive your data in a structured, machine-readable format
  • Right to restriction of processing - request limitation of processing under certain conditions
  • Right to lodge a complaint - file a complaint with the French data protection authority (CNIL)

To exercise your rights, contact us at: support@treets.me

We will respond to your request within one month of receipt.

Important note regarding right to erasure:

  • Personal data and unpurchased content can be deleted upon request
  • Purchased content is retained to honor contractual obligations to buyers (perpetual license)
  • Transaction records are retained for 10 years due to legal accounting obligations
  • Exceptional deletion requests for purchased content will be evaluated case-by-case

8. Data protection and security

For creators - Your responsibilities as data controller

When you collect personal data from buyers through your content sales (including email addresses visible in transaction records), you should be aware that:

  • You act as a data controller for how you use buyer information outside of the Treets.me platform
  • You must respect buyer rights under GDPR if you process their data independently
  • InSugarWeTrust processes buyer data on behalf of the platform's operation (payments, delivery, support)

Security measures

Your data is hosted on secure servers (AWS, region eu-west-3 Paris) and accessible only by authorized personnel.

Security measures in place:

  • Encryption of data in transit (HTTPS/TLS) and at rest
  • Access controls and authentication
  • Regular security audits
  • Logging and monitoring of access
  • Incident response procedures

9. Cookies

Treets.me does not use non-essential cookies at the moment. Technical cookies may be used to ensure the operation of the service (authentication, security). A complete cookie policy will be implemented when marketing or analytical cookies are introduced. You will be informed and asked for consent before any such deployment.

10. International data transfers

Your data is stored within the European Union (AWS region eu-west-3, Paris).

Stripe Connect may transfer data outside the EU for payment processing. These transfers are protected by:

  • EU Standard Contractual Clauses
  • Stripe's compliance with GDPR requirements
  • Adequate safeguards as defined by GDPR Article 46

11. Minors

Treets.me is strictly reserved for users aged 18 and over. We do not knowingly collect data from minors. If you become aware that a minor has created an account, please contact us immediately at support@treets.me so we can delete the account.

12. Changes to this privacy policy

We reserve the right to modify this privacy policy to reflect changes in our practices or legal requirements. Any significant change will be communicated by email or through a prominent notice on the platform. Last updated: January 3, 2026

13. Contact and questions

For any question regarding this privacy policy or the processing of your personal data:

Email: support@treets.me

Data Protection Officer (if applicable): support@treets.me

Supervisory authority (France):

CNIL (Commission Nationale de l'Informatique et des Libertés)

3 Place de Fontenoy TSA 80715 75334 PARIS CEDEX 07

Website: https://www.cnil.fr