Privacy Policy

Last updated: May 2, 2026

REasy (operated by REasy SAS, 25 Rue du Faubourg Saint-Honore, Paris, Ile-de-France 75008, France) is committed to protecting your personal data. This policy explains how we collect, use, and safeguard information about you in accordance with the General Data Protection Regulation (GDPR) and applicable French law.

1. Data Controller

The data controller responsible for your personal data is REasy SAS, registered in France. You can contact our data protection representative at [email protected].

2. What Data We Collect

We collect the following categories of personal data:

  • Identity data: name, company name
  • Contact data: email address, phone number, postal address
  • Transaction data: payment amounts, currency, settlement records
  • Technical data: IP address, browser type, device identifiers, cookie data
  • Usage data: pages visited, features used, interaction logs
  • Communication data: messages sent through contact forms or support channels

3. How We Use Your Data

We process your data for the following purposes:

  • To provide and operate the REasy platform and services
  • To process and settle payments on your behalf
  • To comply with legal and regulatory obligations (AML, KYC, tax reporting)
  • To respond to enquiries and provide customer support
  • To send service communications and account notifications
  • To improve our products and services through usage analysis

4. Legal Basis for Processing

We process your data on the following legal bases: performance of a contract (when processing is necessary to provide our services), compliance with a legal obligation (regulatory requirements), legitimate interests (fraud prevention, service improvement), and consent (where you have explicitly agreed, for example for marketing communications).

5. Data Retention

We retain transaction data for 10 years as required by French accounting and financial regulations. Contact and account data is retained for the duration of our business relationship plus 3 years. Technical and usage data is retained for 13 months. You may request deletion of data that we are not legally required to retain.

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access: request a copy of the data we hold about you
  • Right to rectification: correct inaccurate or incomplete data
  • Right to erasure: request deletion of data we no longer need
  • Right to restriction: limit how we process your data in certain circumstances
  • Right to data portability: receive your data in a structured, machine-readable format
  • Right to object: object to processing based on legitimate interests
  • Right to withdraw consent: for processing based on your consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertes) at cnil.fr.

7. International Data Transfers

To provide cross-border payment services, your data may be transferred to recipients outside the European Economic Area. Such transfers are protected by Standard Contractual Clauses approved by the European Commission or other appropriate safeguards.

8. Cookies

We use cookies and similar technologies on our website. See our Cookie Policy for full details.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on our website. The date at the top of this page indicates when the policy was last revised.