Who is responsible for your data
TIG'R is published by Vincent Romain, acting in his own name. He is the controller of your personal data, and the person to write to with any question about it.
What we collect
Only what the platform needs in order to work. Nothing is collected for advertising purposes.
- Your account: email address, password (never kept in clear text, only its hash), username, bio, country and profile picture.
- What you post and do on the platform: videos, comments, votes, private messages (photos included), follows and blocks.
- Technical data tied to your sign-ins: IP address and browser used, recorded with each open session.
- A device identifier, if you accept notifications, so that we can send them to you.
- An identity document, only if you request account verification. It is kept in private storage and is never published.
- If you subscribe, the customer and subscription identifiers issued by Stripe. Your card number never passes through our servers and is never stored there.
Why we use them
Every piece of data serves a specific purpose:
- Running the service: your account, your feed, your videos, your messages.
- Moderating what is published: every video is analysed automatically before going live, to catch prohibited content and copyrighted music.
- Keeping accounts secure: spotting unusual sign-ins and letting you stay signed in without retyping your password.
- Managing subscriptions, when you take one out.
Who we share them with
Only with the technical providers the service needs in order to run:
- Railway, for hosting the API and the database.
- Cloudflare R2, for storing videos, images and documents.
- Google Gemini, for automatic analysis of video content.
- ACRCloud, for detecting copyrighted music.
- Firebase Cloud Messaging (Google), for sending notifications.
- Sentry, for diagnosing technical errors.
- Stripe, for processing payments.
- Resend and ImprovMX, for sending and receiving email.
Your data is never sold, rented or handed over for advertising purposes. Some of these providers are established outside the European Union; those transfers rely on the safeguards provided for by the GDPR.
How long we keep them
- Your account data: for as long as your account exists.
- Identity documents: 30 days after the request has been reviewed, then deleted automatically.
- Private messages and the photos they contain: 30 days after they are sent, then deleted automatically. Photos are kept in a private space and are only visible to the members of the conversation.
- Session data, including IP address: until the session expires or is revoked.
- Subscription information: for as long as accounting obligations require.
What happens when you delete your account
Deletion is immediate and final, but it does not make everything disappear:
- Deleted: your votes, your private messages, your profile picture and your notification identifiers.
- Anonymised: your email address, username, bio and country.
- Kept: the videos and comments you published, which stay online under the label “Deleted user”.
The steps are set out on the account deletion page.
Your rights
The General Data Protection Regulation gives you the following rights:
- Access the data we hold about you.
- Have it corrected if it is inaccurate.
- Request its deletion.
- Receive a copy of it in a reusable format.
- Object to certain processing.
To exercise them, write to us. If our answer does not satisfy you, you may lodge a complaint with the CNIL, the French data protection authority.
Minors
The platform is not open to anyone under 15. If we learn that an account belongs to someone younger, it is deleted.
Changes
This policy may change. The date at the top of the page shows when it was last updated, and significant changes will be flagged to you in the app.
