Privacy Policy

Effective Date: 10th of May 2025

BonApp ("we", "us", or "our") is committed to protecting the privacy of our users and their customers. This Privacy Policy explains how we collect, use, and safeguard personal data when you use our platform to manage your online business presence and customer reviews.

BonApp is a French company registered in France and processes all personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Who We Are

BonApp
3 Place du Palais, Avignon, 84000, France
Email: contact@bonapp.click

We provide a SaaS platform that helps hotel and restaurant owners manage their business information and collect customer reviews from platforms such as Google Business Profile.

2. What Data We Collect

From Our Business Users (Hotels/Restaurants):

• Email addresses
• Business name and location
• Billing address and payment information
• Login credentials (OAuth-based, for Google Business Profile)
• Usage analytics and behavior within the platform

From Your Customers (Reviewers):

• Name (if included in review metadata)
• Review content and ratings
• Review timestamps and related metadata from Google Business Profile API

3. How We Collect Data

• Account registration and onboarding
• OAuth-based access to Google Business Profile
• Retrieval of review content through Google APIs
• User activity within the BonApp platform
• Payment and billing interactions via Stripe

4. Legal Basis for Processing

• Contractual necessity: to provide the services you request
• Legitimate interests: to improve services and ensure security
• Legal obligations: compliance with regulations
• Consent: for data access and specific actions

5. How We Use Your Data

• Authenticate users via Google
• Display and manage reviews
• Monitor platform performance
• Handle billing and payments
• Communicate service updates

We do not use personal data for advertising or profiling.

6. Data Sharing and Transfers

We do not sell or share your data with third parties for marketing purposes.

However, we use trusted third-party service providers:

• Stripe – our payment processor, which may handle billing addresses, names, email addresses, and payment information. Stripe is certified under the EU-U.S. Data Privacy Framework and complies with GDPR.

All data is processed within the European Economic Area (EEA) or in countries with adequate data protection as recognized by the European Commission.

7. Data Retention

We retain data only as long as necessary for service provision, legal compliance, and business recordkeeping. Data is securely deleted or anonymized when no longer needed.

8. Your Rights

• Access your personal data
• Correct inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Request a copy in a portable format

To exercise these rights, email us at: contact@bonapp.click

9. Security Measures

• Encryption in transit and at rest
• OAuth access controls
• Role-based permissions
• Regular audits and security reviews

10. Cookies and Tracking

We do not use cookies or any tracking technologies.

11. Changes to This Policy

We may update this policy periodically. We will notify users via email or in-app notice. The most recent version will always be available at bonapp.click/privacy.

12. Contact Us

Data Protection Officer
Email: cyrus@bonapp.click
BonApp
3 Place du Palais, Avignon, 84000, France