Privacy Policy

BringIt ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using BringIt, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the platform.

The data controller responsible for your personal data is:

We process your personal data based on the following legal grounds:

We use your information to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Enable communication between shoppers and travelers
• Send administrative communications (account verification, security alerts)
• Respond to your comments, questions, and support requests
• Send marketing communications (with your consent)
• Monitor and analyze usage patterns to improve the platform
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations

We may share your information with:

• Other users: Your public profile (name, avatar, reviews) is visible to other users. When you interact with another user, they see your name and can message you.
• Service providers: Third-party companies that help us operate the platform (see Third-Party Services section below).
• Legal requirements: When required by law, court order, or government request.
• Business transfers: In connection with a merger, acquisition, or sale of assets.

We use the following third-party services to operate the platform:

Some of our service providers are located outside the European Economic Area (EEA). When we transfer your data outside the EEA, we ensure adequate protection through:

• EU-US Data Privacy Framework: For US-based services certified under the DPF (Stripe, Google)
• Standard Contractual Clauses: EU-approved model contracts for international transfers
• Adequacy decisions: Transfers to countries with adequate data protection laws

You can request more information about our international transfer safeguards by contacting us.

We use cookies and similar technologies to operate and improve the platform:

You can control cookies through your browser settings. Note that disabling essential cookies may prevent the platform from functioning properly.

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit: All data transmitted via HTTPS/TLS
• Encryption at rest: Sensitive data encrypted in our databases
• Secure authentication: Passwords hashed with bcrypt, OAuth 2.0 support
• Access controls: Role-based access, principle of least privilege
• Regular audits: Security reviews and vulnerability assessments

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will notify you promptly if a data breach occurs.

We retain your data for as long as necessary to provide our services:

• Account data: Retained while your account is active
• Transaction records: 7 years (legal/tax requirements)
• Messages: 2 years after last activity, then anonymized
• Analytics data: 26 months (Google Analytics default)

When you delete your account, we remove or anonymize your personal data within 30 days, except where retention is required by law.

Under the GDPR, you have the following rights regarding your personal data:

To exercise these rights, contact us at privacy@brngit.com. We will respond within 30 days.

We do not use automated decision-making or profiling that produces legal effects or significantly affects you without human involvement.

Basic automated processes (like fraud detection flags) are always reviewed by our team before any action is taken on your account.

BringIt is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

If you believe a child has provided us with personal information, please contact us at privacy@brngit.com.

If you believe we have violated your data protection rights, you have the right to lodge a complaint with a supervisory authority. In France, this is:

We encourage you to contact us first at privacy@brngit.com so we can address your concerns directly.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Platform. The "Last updated" date at the top indicates when the policy was last revised.

Your continued use of BringIt after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices: