C
CurrencyRest

Privacy Policy

GDPR-compliant

Last updated: June 2026

1. Data controller

MBHC SAS (SAS (société par actions simplifiée)), 173 rue de Courcelles, 75017 Paris, France. Data protection contact: privacy@currencyrest.com.

2. Data we collect

  • Account: email address, name, password (hashed) or Google identifier.
  • API usage: API keys, request timestamps and volumes, endpoints called, IP address, user-agent.
  • Billing: handled by Stripe; we never store your card numbers.
  • Analytics: aggregated, privacy-friendly usage statistics (no third-party advertising cookies).

3. Purposes and legal bases

  • Provide the service and authenticate requests — performance of contract.
  • Billing and fraud prevention — legal obligation / legitimate interest.
  • Measuring and improving the service — legitimate interest.
  • Service emails (verification, security) — performance of contract.

4. Processors and recipients

We rely on the following processors:

  • Stripe — payments and subscriptions.
  • Fly.io — application and database hosting.
  • Google / Firebase — Google sign-in and email delivery.
  • SendGrid — transactional email delivery.

We never sell your personal data.

5. Transfers outside the EU

Some processors are located outside the European Union (notably in the United States). Such transfers are governed by the European Commission's Standard Contractual Clauses (SCCs) or equivalent safeguards.

6. Retention

Account data is kept while the account is active, then deleted or anonymized. API usage logs are retained for up to 13 months. Billing records are retained as required by law and accounting obligations (up to 10 years).

7. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection. To exercise them, contact privacy@currencyrest.com. You may also lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) or your local authority.

8. Cookies

We use only strictly necessary cookies (session, authentication) and privacy-friendly analytics. No third-party advertising cookies are set.

9. Contact

privacy@currencyrest.com — MBHC SAS, 173 rue de Courcelles, 75017 Paris, France.