Privacy policy

byLegit is a review and transparency platform for websites and businesses, published by Mr Antoine PELKA--ROCHE, sole trader.

For any question about your personal data, you can contact us at hello@bylegit.com.

We only collect the data needed to run the platform:

• Account data: email address, display name, optional profile picture, and an encrypted password managed by our authentication provider.
• Published content: reviews, ratings, comments, replies to reviews.
• Technical data: a hashed, anonymised IP address used to fight fake reviews and duplicate accounts.
• Cookies and session identifiers: required for sign-in and service security.

We use your data to:

• create and manage your user account;
• publish and display reviews and comments;
• calculate company scores fairly;
• detect and limit fraudulent behaviour (fake reviews, duplicate accounts);
• let claimed businesses reply to reviews;
• send you notifications about your activity on the platform.

Processing is based on the performance of the terms of use you accepted (GDPR article 6.1.b), on our legitimate interest in keeping the platform secure and reliable (article 6.1.f), and, where applicable, on your explicit consent.

byLegit never sells or rents your personal data. Your data may be shared with:

• our technical hosting and authentication providers;
• the competent authorities, where required by law.

Information you choose to display publicly (reviews, name, profile picture) is visible to other visitors according to the privacy settings you define.

Your account data is kept for as long as your account is active. Public reviews and comments are kept until you or our moderation team delete them.

Anti-fraud technical data is kept for a limited period and does not allow us to identify you directly.

We implement technical and organisational measures to protect your data: encryption, restricted access, secure authentication and access monitoring.

Under the GDPR, you have the following rights regarding your personal data:

• right of access;
• right to rectification;
• right to erasure (the right to be forgotten);
• right to restriction of processing;
• right to object;
• right to data portability.

You can exercise these rights from your account settings or by contacting us at hello@bylegit.com. You also have the right to lodge a complaint with the French data protection authority (CNIL).

byLegit uses cookies that are strictly necessary for authentication and for the site to work. No advertising or third-party tracking cookies are used.

This policy may be updated at any time. We encourage you to review it regularly. Significant changes will be notified to you at your next sign-in.