Legal information
Privacy policy
Last updated: September 25, 2026
This policy explains what personal data we process when you visit sweescape.com, when we contact you and when you use the Sweescape application (SweeBadge, SweeScan, SweeAnalytics, SweeInvoice and the AI assistant).
Who is responsible for your data?
SWEESCAPE, a French SAS with a share capital of €1,000, Immeuble Le Centaure, Route de Carnon, 34970 Lattes, France, registered with the Montpellier Trade and Companies Register under number 991 518 143.
For any question about your data or to exercise your rights: [email protected].
Two very different situations
- You visit our website, we contact you, or you use Sweescape as an organizer. We decide how your data is used: we are the data controller. This is the main subject of this page.
- You buy a ticket, receive an invitation or an email from an organizer who uses Sweescape. The organizer decides how your data is used; we process it on their behalf, as a data processor. See You are attending an event.
The data we process, and why
| Why | What data | Legal basis | How long |
|---|---|---|---|
| Measure website traffic and sign-ups to the application | Pages viewed, clicks, device type, browser, approximate country, technical identifier. On the website, a recording of your visit with typed fields masked. In the application, only the sign-up and account confirmation steps | Your consent | Cookies: 1 year. Data: 25 months at most |
| Measure our ads and make them more relevant | Pages viewed on the website and on the sign-up page, advertising identifier. At sign-up: email, first name and last name, turned into an unreadable fingerprint (hashing) before being sent to Meta | Your consent | Cookies: 3 months |
| Know which companies visit the website | IP address and pages viewed, matched with the company name | Your consent | 3 years after the last contact |
| Reach out to professionals | Business name, email and phone, company, job title, history of our exchanges | Our legitimate interest in presenting our offers to event professionals | 3 years after the last contact |
| Organize a demo | Information entered when booking the meeting | Pre-contractual measures | 3 years after the last contact |
| Create and manage your account | First and last name, email, password (stored with irreversible encryption), photo, company, settings | Performance of the contract | Lifetime of the account, then 30 days after it is closed |
| Manage your subscription, invoicing and payments | Billing details, invoice and payment history. Your card number is processed by Stripe: we never have access to it | Performance of the contract and legal obligations | 10 years for accounting records |
| Send you service emails and text messages | Email, phone | Performance of the contract | Lifetime of the account |
| Answer through the AI assistant | Your questions and the account information needed to answer them | Performance of the contract | Lifetime of the account |
| Support you | Your messages and our replies | Performance of the contract | 3 years after the last exchange |
| Keep the service secure | Connection logs, IP address | Our legitimate interest in protecting the service | 12 months |
You never have to accept measurement or advertising cookies to use the website or the application.
Who receives your data?
Only the SWEESCAPE staff who need it have access, along with our service providers, strictly for the task entrusted to them. We never sell your data.
| Provider | Task | Country |
|---|---|---|
| Hetzner Online | Server hosting | Germany |
| Scaleway | Daily database backups | France |
| Microsoft Azure | File storage, email delivery, AI assistant (Azure OpenAI, your data is not used to train models) | European Union |
| Sweego | Email and text message delivery | France |
| Stripe | Payments and subscriptions | Ireland, United States |
| Cloudflare | Custom domains for ticketing pages, network security | United States, global network |
| PostHog | Audience measurement, with your consent | European Union |
| Meta Platforms Ireland | Advertising, with your consent | Ireland, United States |
| lemlist | Outreach, identification of visiting companies with your consent | France |
| Calendly | Meeting booking | United States |
| Google, Apple | Tickets added to Google Wallet or Apple Wallet, only when the attendee asks for it | United States |
| Canva, Tally | Integrations, only if the organizer turns them on | Australia, Belgium |
We may also disclose data to public authorities when the law requires it.
Transfers outside the European Union
Some providers may process data outside the European Union, particularly in the United States. These transfers are covered either by the European Commission’s adequacy decision (EU–US Data Privacy Framework, for certified companies) or by the European Commission’s standard contractual clauses.
You are attending an event
When you buy a ticket or reply to an invitation on a ticketing page powered by Sweescape, the event organizer is responsible for your data. We process it on their behalf and according to their instructions:
- the information the organizer asks for: at least email, first name and last name, plus any fields they add;
- your order and your tickets; the payment goes directly to the organizer’s Stripe account;
- the scan of your ticket at the entrance;
- the emails and text messages the organizer sends you.
On ticketing pages, we measure traffic without cookies: operating system, browser, device type, country and date of visit. If the organizer adds their own measurement or advertising tools (Meta pixel, TikTok, Google…), a banner asks for your consent before they are turned on. The organizer is responsible for these tools.
To exercise your rights over this data, contact the organizer, whose details appear on their ticketing page and in their emails. If you write to us, we will forward your request to them.
Your rights
At any time, you can:
- access your data and get a copy of it;
- have it corrected if it is inaccurate;
- have it deleted, unless we must keep it to meet a legal obligation;
- restrict its use;
- object to its use, including for outreach, without having to give a reason;
- receive it in a reusable format (portability);
- withdraw your consent, for example with the “Manage cookies” button at the bottom of the page;
- give instructions about what happens to your data after your death.
Write to us at [email protected]. We reply within one month. Every outreach email also contains a link to stop receiving them.
If you believe your rights are not being respected, you can file a complaint with the French data protection authority (CNIL): 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr, or with the authority of your country.
Security
Exchanges with the website and the application are encrypted (HTTPS). Passwords are stored with irreversible encryption. Data is hosted on our dedicated servers in Germany, with a daily backup in France, and only the people who need it have access. Payments are processed by Stripe, which is PCI-DSS Level 1 certified.
Changes
We may update this policy. The date of the last update appears at the top of the page. If we make a significant change, we let our customers know by email.