U.S. Privacy Policy

1. Controller And Contact

OffPeakGo France SASU operates the OffPeakGo platform. For privacy requests, corrections, deletion requests, access requests, appeal requests, or questions about this notice, email [email protected].

2. Personal Information We Process

• Identifiers such as name, email address, phone number, account ID, and IP address
• Commercial information such as bookings, payments, invoices, and support records, plus gift-card records where a card was already issued: gift-card purchase and redemption are currently disabled on the platform and in the mobile apps
• Merchant verification information needed for onboarding and fraud prevention
• Approximate or precise location when enabled by the user
• Device, security, fraud-prevention, and diagnostic information

Payment card details are processed by Mollie or another approved payment service provider. OffPeakGo does not store full card numbers.

3. Purposes

We use personal information to provide accounts, bookings, payments, merchant tools, customer support, security, fraud prevention, legal compliance, product analytics, and, where consent or a valid opt-in applies, marketing measurement.

4. Sharing

We share information with service providers such as Mollie, hosting, database, email, security, analytics, and support tooling providers. We may also disclose information when required by law, to enforce our terms, or to protect users and the platform.

OpenAI acts as a service provider on our behalf and processes the content submitted solely for moderation and service-security purposes. The content concerned — reviews and comments, reports, photos, service names and descriptions, merchant profile descriptions and details — is sent to OpenAI as part of operating and securing the platform, and that processing is covered by your acceptance of the terms of service. OpenAI does not use that content for advertising or model training.

OffPeakGo does not sell personal information. Cross-context behavioral advertising and analytics tags remain disabled unless the relevant consent and deployment flags are set.

5. Your Rights

Depending on your state, you may have rights to access, correct, delete, obtain a copy of, or opt out of certain processing of personal information. Send requests to [email protected]. We will verify the request before acting on it.

6. Retention

We keep information only as long as needed for the purposes above, including tax, accounting, fraud-prevention, dispute, and legal retention requirements.

You can request closure of your account from the app or from the public page www.offpeakgo.com/delete-account, without reinstalling the app and after a reasonable identity check. Closing access and cleaning up the data are two distinct stages. Once the request is accepted the profile is deactivated in the same operation that records it, before any cleanup; the sign-in identities, sessions, trusted devices, and push notification tokens are released next, and the request is only reported as closed once that release has finished. Bookings and financial records are retained for the applicable accounting and tax periods under their original technical identifier. A contact address strictly necessary for refund notifications is held in an internal archive that is not reachable from a customer account and is deleted at cleanup; a pending refund notification can delay it. Signing up again later creates a separate account with a new identifier.

7. Seller Tax Data (DAC7)

This section concerns Merchants selling through the Platform. It does not apply to customers, and it does not apply to sellers whose tax residence and place of establishment are both outside the European Union, and those sellers are not asked for any of this data.

From any seller in scope we collect seller type, legal or company name, country of tax residence, business registration number and country, and a primary residence or registered office address. From a seller who has been paid or credited through OffPeakGo during the calendar year we also collect a tax identification number (TIN) and its issuing country; for an individual, a date of birth and, only where no TIN is held, city and country of birth; for a company, whether it has a permanent establishment in another Member State. A TIN is not a social security number: we never ask for one and we do not collect any.

Purpose: identifying sellers and verifying the accuracy of their tax data, in anticipation of the obligation arising from Directive (EU) 2021/514, known as DAC7. The applicability assessment is not concluded, so this collection is carried out in anticipation of that obligation rather than because it is already established. The intended recipient is a tax authority, should the obligation apply to OffPeakGo; to date no seller tax data has been passed to any tax authority, and the Platform produces no tax statement and no tax advice.

The date of birth and the TIN value are encrypted at rest, and a TIN is never displayed back in full, and only its last four characters remain visible. This data is kept for as long as the Merchant account exists and is deleted when the account is deleted or anonymised. Please note that if DAC7 applicability is confirmed, a statutory retention period of five to ten years depending on the Member State will apply and will conflict with that immediate deletion; this section will then be updated.