Privacy policy

• Company name — TOPPLA SAS
• Registered office — 5 Esp. Anna Marly, 44600 Saint-Nazaire
• Publication director — Théo Olivier
• DPO contact — support@toppla.fr

We collect the following data when you use the platform:

• Identification data— last name, first name, email address, telephone number and job title.
• Professional data— company name, SIRET number, industry and HR role.
• Connection data— IP address, connection logs and browser type.
• Usage data— actions performed on the platform, simulations and housing requests.
• Billing data— payment details (processed by Stripe).

• Performance of the contract

  Managing your account, providing services (simulations, housing requests, marketplace, employer branding) and customer support.

• Legitimate interest

  Improving the platform, anonymised usage statistics, fraud prevention and IT security.

• Consent

  Sending newsletters, audience measurement and personalisation cookies, and satisfaction surveys.

• Legal obligation

  Retaining billing data and responding to judicial requests.

Your data may be shared with the following categories of recipients:

• Technical service providers— hosting (Hostinger), database (Supabase), payments (Stripe), transactional emails (Resend).
• Audience measurement— Google Analytics (subject to your consent through Axeptio).
• Housing partners— when connecting employers with housing providers, only the data needed for the request.
• Competent authorities— where legally required.

No data is sold to third parties for commercial purposes.

• Account dataContract duration + 3 years
• Billing data10 ans (obligation comptable)
• Connection logs12 mois
• Analytics cookies13 mois maximum
• Prospecting data3 years after the last contact

Under the GDPR, you have the following rights:

• Right of access— obtain confirmation of processing and a copy of your data.
• Right to rectification— correct inaccurate or incomplete data.
• Right to erasure— request deletion of your data.
• Right to object— object to processing on legitimate grounds.
• Right to restriction— temporarily restrict processing.
• Right to data portability— receive your data in a structured format.
• Right to withdraw your consentat any time.

To exercise your rights, please write to support@toppla.fr. We respond within 30 days. You may also lodge a complaint with the CNIL.

Toppla uses cookies to operate the website and improve your experience. Your cookie preferences are managed byAxeptio.

• Strictly necessary cookies

  Authentication, security and session preferences. No consent required.

• Analytics cookies

  Google Analytics to understand site usage. Subject to consent.

• Third-party cookies

  Stripe (secure payments). Subject to consent.

You can change your preferences at any time using the “My cookies” link in the footer.

Toppla implements appropriate technical and organisational measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest.
• Secure authentication and role-based access management.
• Hosting compliant with European standards.
• Secure payments through Stripe (PCI-DSS certified).
• Regular backups and a business continuity plan.

Some of our service providers (Supabase, Stripe, Google) may process data outside the European Union. These transfers are governed by standard contractual clauses (SCCs) approved by the European Commission or by adequacy decisions, ensuring a level of protection equivalent to the GDPR.

Toppla reserves the right to amend this privacy policy at any time. In the event of a significant change, users will be informed by email or a notification on the platform. The date of the most recent update is shown at the top of this page.

For any questions about the protection of your personal data, please write to support@toppla.fr.