Privacy policy

1. Controller and contact

The controller is PEEWEE, EURL with share capital of EUR 1,000, registered under number 899 831 499 RCS Lyon, whose registered office is 7 Clos des Granges, 69510 Messimy, France. Questions and rights requests can be sent through the contact form.

2. Data processed

Depending on how Tentalead is used, PEEWEE processes:

Category	Examples
Account and identity	Name, email, international telephone number, account type and verification or suspension status, authentication identifiers and acceptance of the terms
Professional profile	Display name, photo, title, biography, published voice sample, uploaded CV and extracted CV text, experience, education, skills, sectors, sales methods, locations, availability and compensation preferences
Private professional identity	Company name and legal form, SIREN, SIRET or RSAC, VAT number, registered and billing addresses
Company and missions	Company and contact identity, legal information, website, location, sectors, mission brief, goals, deliverables and proposed compensation
Matching and collaboration	Search and matching results, conversations, messages, invitations, collaboration status, events, compensation confirmations, reports, ratings, reviews and responses
Moderation and operations	Publication decisions, rejection or suspension reasons, consent records and administration audit trail
Technical data	IP address, date and time, requested routes, browser and device, security logs, errors, performance data and transactional-email delivery information

Data mainly comes from users, another party to an exchange, or is generated when operating and securing the Service. Tentalead does not request special-category data under Article 9 GDPR; users must not submit sensitive or irrelevant confidential information.

3. Purposes and legal bases

Data is processed to create, verify and administer accounts; verify professional identity; publish content requested by users; enable search, matching, messaging and collaboration; moderate content; prevent abuse, fraud and security incidents; send essential transactional emails; diagnose errors; answer requests; establish or defend legal claims; and comply with legal obligations.

These purposes rely, as applicable, on pre-contractual steps and performance of the terms, legal obligations, and PEEWEE's legitimate interests in operating a safe, reliable professional marketplace. Consent is requested for optional publication of a joint mission report and can be withdrawn before publication. Tentalead does not make solely automated decisions producing legal or similarly significant effects.

4. Public and private data

Profiles, company pages, missions, reviews, responses and joint reports are public only when the relevant publication and consent conditions are met. Public pages may be indexed by search engines and remain temporarily in their caches after removal. Profiles marked contacts-only are shown only to authorised users.

Telephone numbers, source CVs and extracted text, legal identity and addresses, login email, private messages, authentication data, hidden daily rates and private dashboards are not public. Messages are visible to participants and, where needed for security or moderation, authorised PEEWEE personnel.

5. Recipients, providers and transfers

Data is disclosed only as needed to authorised PEEWEE personnel; users involved in an exchange; the public for expressly published content; technical providers such as Vercel, Supabase for PostgreSQL and file storage, Resend and Sentry; and authorities, courts or advisers where required by law or legal claims. PEEWEE does not sell personal data.

Some providers are established in, or use processors outside, the European Economic Area. Transfers are safeguarded as applicable by an adequacy decision, the Data Privacy Framework, European Commission standard contractual clauses and supplementary measures. Provider safeguards are available from Vercel, Supabase, Resend and Sentry.

6. Retention

Data	Retention period or criterion
Account and Service data	For the life of the account, then only evidence or legally required data is archived for the applicable period, generally five years
Telephone, professional identity and addresses	For the life of the account, then only for applicable legal or evidential needs, generally five years
Source CV and extracted text	Until the user replaces or removes it, or closes the account, unless limited retention is required for a legal claim
Public content	Until removed, replaced or the account is closed; some collaboration material may be anonymised to preserve record integrity
Messages, collaborations and reviews	During the active relationship, then up to five years after the last activity where evidence or a dispute requires it
Authentication sessions and links	Until expiry, use or revocation
Access and security logs	Up to twelve months, unless an incident or legal need requires longer
Sentry error and performance data	The configured project period, no more than ninety days
Rights requests	During handling and as long as needed to evidence the response; identity documents are removed once verification ends unless otherwise required

At the end of the applicable period, data is deleted or anonymised. Archived data is separated from ordinary use and restricted to authorised people.

7. Cookies and security

Tentalead currently uses no advertising cookies, marketing profiling or consent-based audience measurement. It uses only storage mechanisms strictly necessary for authentication, security, session continuity and essential preferences. If a consent-based tracker is added, it will remain inactive until freely accepted and can be refused or withdrawn as easily.

PEEWEE applies measures appropriate to the risks, including access controls, email verification, role separation, encrypted communications, audit logs and error monitoring. Suspected compromise should be reported promptly through the contact form.

8. Your rights

Subject to the GDPR's conditions, individuals may request access, rectification, erasure, restriction, objection and portability, withdraw consent, and give instructions about data after death. Send a request through the contact form, identifying the relevant account. Proof of identity is requested only where reasonable doubt exists. PEEWEE normally responds within one month, extendable by two months for complex or numerous requests.

A complaint may be lodged with the French data protection authority, CNIL.

9. Children and changes

Tentalead is a professional Service not intended for children. Contact PEEWEE if a child appears to have supplied data. This policy may be updated to reflect changes to the Service, providers or law; material changes are notified by an appropriate means where required.