Legal information

Privacy policy

What BeeVitrine collects, why, who it is shared with, how long it is kept, and how to exercise your rights. We sell no data and show no advertising.

Updated on 24 October 2026

  1. 01Who is responsible

    BeeGoro LTD, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, UK, is responsible for your account data. For any question about your data: contact@beevitrine.com.

    For the requests visitors send from your website (callback form), you, the business, are responsible. BeeVitrine processes them on your behalf, only to pass them on to you.

  2. 02What we collect

    • your account: e-mail address, password (stored in a form that cannot be read back) or Google identifier if you sign in with Google, screen language;
    • your business: what you enter in the form (name, trade, address, hours, numbers, services, reviews you copy in), your photos and logo. Photos are resized, and their location data (GPS) removed on upload;
    • your market: the country inferred from your connection when you create your first website, to set the price zone and currency;
    • billing: invoices, chosen plan, payment references. Your mobile money number or bank card is entered with the payment provider, and we never receive your codes or your card number;
    • your websites’ visitors: the name, number and message left in the callback form. The WhatsApp button opens a direct conversation between the visitor and you: we see none of it;
    • your websites’ statistics: page views, visits, source, device type and clicks to WhatsApp or the phone, counted as daily totals, with no cookie and without keeping any IP address or visitor identifier. A visitor whose browser asks not to be tracked is not counted;
    • technical data: IP address and request logs, for security (abuse limits) and fixing errors.
  3. 03Why

    • to provide the service: create, display and publish your websites, pass requests on to you (performance of the contract);
    • to invoice and collect payment (performance of the contract, accounting obligations);
    • to write to you about your account: confirmation code, payment link, due date, monthly report (performance of the contract);
    • to protect the service against abuse and fix outages (legitimate interest);
    • if you agreed to it, to announce on beevitrine.com your first name, your city and how many days ago your website was published, never your last name, your address or your website’s link (your consent, which you can withdraw at any time in Settings);
    • to count visits to the public pages of beevitrine.com, and how often each screen of the website creation form is shown, as daily totals (pages viewed, source, device type, country), with no cookie and without keeping any IP address or identifier (legitimate interest);
    • if you agreed to it, to measure visits to beevitrine.com with Google Analytics: pages viewed, source, device type (your consent, which you can withdraw at any time through the “Cookies” link at the bottom of the page).

    We do not use your data for advertising, and sell none of it.

  4. 04Who it is shared with

    Only with the providers that run the service, each for its own task:

    • Vercel: hosting of the website and servers (functions in London);
    • Neon: database (in London);
    • Cloudflare R2: storage of photos and logos;
    • Upstash: working memory for abuse limits;
    • Resend: sending e-mails (in Ireland);
    • the payment provider (mobile money and bank cards): collecting payments;
    • Sentry: error reporting (in Germany);
    • DeepSeek: writing texts, from your business information;
    • Google: sign-in with Google, and measuring visits to beevitrine.com if you agreed to it (Google Analytics);
    • Pexels: searching illustration photos (only trade keywords are sent).

    Some of these providers are located outside your country, notably in the United States and, for DeepSeek, in China. We only send them what their task requires. We may also disclose data to an authority that legally requires it.

    If you embed a YouTube, Facebook or TikTok video on your website, that platform’s player only loads for your visitor when they play the video; the platform then applies its own rules and cookies. Before that, nothing is sent to it.

    If you answer the website creation form with the “Dictate” button, your voice is turned into text by your browser’s speech recognition service (Google for Chrome, Apple for Safari), under its own rules. BeeVitrine only receives the text, which you review and can correct, and keeps no recording of your voice. The microphone only turns on when you tap that button.

  5. 05How long

    • your account and websites: as long as your account is active;
    • after your websites stop (unpaid or canceled): 90 days, then website content, visitor requests and their statistics are deleted;
    • your websites’ statistics: 400 days;
    • invoices: as long as accounting law requires;
    • technical data (confirmation codes, logs, sent e-mails): from a few hours to ninety days depending on their use.
  6. 06Cookies

    BeeVitrine uses cookies needed for it to work and, only if you accept them in the banner, Google Analytics cookies to measure visits to beevitrine.com. No advertising cookies. Declining changes nothing about the service, and the “Cookies” link at the bottom of the page lets you change your mind at any time. Websites built with BeeVitrine set none of these cookies for their visitors.

    • session: keep you signed in (15 minutes, renewed for up to 7 days) and protect your forms (7 days);
    • language: remember the French or English you chose (one year);
    • sign-in with Google: check Google’s response (5 minutes);
    • partner link: remember the partner who recommended BeeVitrine to you (90 days), only if you arrived through their link;
    • audience measurement, if you agreed to it: Google Analytics _ga cookies, on beevitrine.com only (13 months). Your choice itself is kept in your browser for 13 months.
  7. 07Your rights

    You may ask to access your data, correct it, receive it in a readable format, object to a processing or have it deleted. Most of it can be corrected directly from your workspace. For the rest, and to delete your account, write to contact@beevitrine.com: we answer within thirty days.

    A visitor who wants a request sent from a website deleted can contact the business, or us.

    If you believe your rights are not respected, you may contact the data protection authority of your country.

  8. 08Security

    Exchanges are encrypted (HTTPS), passwords stored in a form that cannot be read back, database access restricted. No system is infallible: if a breach affects your data, we will let you know.

  9. 09Changes

    This policy may change; the date at the top of the page shows its latest version. A significant change is announced to you by e-mail.