Privacy policy

1. Data controller

Edmond Migirditchian (EM), Mechelsesteenweg 33, 1800 Vilvoorde, Belgium - contact: support@myfr.ai.

2. Data we collect

Account data: name, email, preferred language and city, password (stored hashed by our authentication provider).

Request and booking data: the needs you describe, quotes, messages, booking history, and where you provide it, a phone/WhatsApp number.

Provider data: business details, service categories, areas served, payout account status (held by Stripe, not by us).

Account activity: while you are signed in, we log what you do on myfr.ai (sign-ins, requests, quotes, bookings, messages sent, profile and listing changes) to run the service and keep it safe. Only our team sees it, it is kept 12 months, and visitors who are not signed in are never linked to a name or an account.

Visit statistics, without cookies: we record which pages are opened on myfr.ai, in what order, and which site or campaign the visit came from, to see where people get stuck. Each visit is grouped under a code computed from a scrambled, salted form of the connection that changes every day, cannot be turned back into an IP address and cannot follow you from one day to the next. No IP address, browser details or cookie are stored for this. When you are signed in, the pages you open are linked to your account. Kept 90 days, seen only by our team (legitimate interest: improving the service).

Technical data: server logs (IP, user agent) kept for security, and strictly necessary cookies for sign-in and language preference. We currently use no advertising or analytics cookies, so no consent banner is required; this policy will be updated before that changes.

3. Why we process it (legal bases)

To provide the marketplace: matching requests with providers, quotes, bookings, payments, notifications (performance of a contract).

To classify your request with AI assistance: the text you submit is processed by our AI provider to categorize it (performance of a contract).

To keep the platform safe and prevent fraud, and to comply with accounting and tax obligations (legitimate interest / legal obligation).

To send you service emails about your requests and bookings (performance of a contract). Marketing emails would only ever be sent with your consent.

4. Processors and recipients

We use: Supabase (database and authentication, EU-hosted project), Stripe (payments and provider payouts), Vercel (hosting), Resend (transactional email), Anthropic (AI classification of request text). Each processes data under its own GDPR commitments and data processing agreements.

Providers see the content of requests dispatched to them. Customers see provider business profiles. We never sell personal data.

5. International transfers

Some processors (e.g. Vercel, Anthropic, Stripe) may process data outside the EEA under appropriate safeguards such as EU standard contractual clauses.

6. Retention

Account data is kept while your account exists and up to 3 years after last activity. Booking and payment records are kept as required by accounting law (up to 10 years). Server logs are kept up to 12 months.

7. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on legitimate interest. Write to support@myfr.ai. You may also lodge a complaint with your supervisory authority (in France, the CNIL; in Belgium, the APD/GBA).